原帖由 "platinum" 发表:
屏蔽了又怎么样?tracerout 是 ICMP,又不是走 udp 协议
[root@platinum root]# tcpdump -i eth1 -e -nn -vv host 172.17.39.1 and icmp
tcpdump: WARNING: eth1: no IPv4 address assigned
tcpdump: listening on eth1
16:36:58.184379 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5957, len 92)
16:36:58.184630 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 134: 172.17.39.254 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5957, len 92) [tos 0xc0] (ttl 128, id 22094, len 120)
16:36:58.185503 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5959, len 92)
16:36:58.185744 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 134: 172.17.39.254 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5959, len 92) [tos 0xc0] (ttl 128, id 22095, len 120)
16:36:58.186628 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5961, len 92)
16:36:58.186868 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 134: 172.17.39.254 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5961, len 92) [tos 0xc0] (ttl 128, id 22096, len 120)
16:36:59.188627 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 2, id 5965, len 92)
16:36:59.190990 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 61.148.107.66 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5965, len 92) (ttl 254, id 39923, len 56)
16:36:59.192250 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 2, id 5967, len 92)
16:36:59.200986 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 61.148.107.66 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5967, len 92) (ttl 254, id 39924, len 56)
16:36:59.201995 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 2, id 5969, len 92)
16:36:59.210980 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 61.148.107.66 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5969, len 92) (ttl 254, id 39925, len 56)
16:37:00.203493 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 3, id 5973, len 92)
16:37:00.204608 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 61.148.107.65 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5973, len 92) [tos 0xc0] (ttl 253, id 7639, len 56)
16:37:00.207741 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 3, id 5975, len 92)
16:37:00.208730 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 61.148.107.65 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5975, len 92) [tos 0xc0] (ttl 253, id 7640, len 56)
16:37:00.209865 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 3, id 5977, len 92)
16:37:00.210855 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 61.148.107.65 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5977, len 92) [tos 0xc0] (ttl 253, id 7641, len 56)
16:37:01.211365 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 4, id 5981, len 92)
16:37:01.212607 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 61.148.7.5 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5981, len 92) (ttl 252, id 0, len 56)
16:37:01.213738 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 4, id 5983, len 92)
16:37:01.214603 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 61.148.7.5 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5983, len 92) (ttl 252, id 0, len 56)
16:37:01.215612 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 4, id 5985, len 92)
16:37:01.216602 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 61.148.7.5 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5985, len 92) (ttl 252, id 0, len 56)
16:37:02.217236 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 5, id 5992, len 92)
16:37:02.218600 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 61.148.3.81 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5992, len 92) (ttl 251, id 0, len 56)
16:37:02.219609 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 5, id 5994, len 92)
16:37:02.220724 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 61.148.3.81 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5994, len 92) (ttl 251, id 0, len 56)
16:37:02.221734 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 5, id 5996, len 92)
16:37:02.222848 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 61.148.3.81 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 5996, len 92) (ttl 251, id 0, len 56)
16:37:03.224357 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 6, id 6001, len 92)
16:37:03.225598 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 202.106.193.234 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 6001, len 92) (ttl 250, id 12890, len 56)
16:37:03.226605 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 6, id 6003, len 92)
16:37:03.227719 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 202.106.193.234 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 6003, len 92) (ttl 250, id 12891, len 56)
16:37:03.229479 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 6, id 6005, len 92)
16:37:03.230844 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 70: 202.106.193.234 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 6005, len 92) (ttl 250, id 12892, len 56)
16:37:04.231104 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 7, id 6010, len 92)
16:37:04.232720 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 106: 202.108.9.16 >; 172.17.39.1: icmp: echo reply (ttl 58, id 42725, len 92)
16:37:04.233851 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 7, id 6012, len 92)
16:37:04.235215 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 106: 202.108.9.16 >; 172.17.39.1: icmp: echo reply (ttl 58, id 42726, len 92)
16:37:04.236725 0:5:5d:29:44:28 0:a:eb:8e:fa:72 0800 106: 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 7, id 6014, len 92)
16:37:04.237964 0:a:eb:8e:fa:72 0:5:5d:29:44:28 0800 106: 202.108.9.16 >; 172.17.39.1: icmp: echo reply (ttl 58, id 42727, len 92)
43 packets received by filter
0 packets dropped by kernel
[root@platinum root]#
原帖由 "rootclown" 发表:
traceroute是用udp实现的
它向目的发送ttl递增的udp包,在中间的路由器会返回一个icmp time exceeded in transmission,在目的地会返回destination port unreachable(如果那个端口没有进程间听,一般是没有进程的)
原帖由 "platinum" 发表:
不知为何我 tracert -d www.163.com,同时在网关上抓包
发现除了 icmp 包可以抓到以外,没有发现 udp 包
这个怎么解释呢
C:\Documents and Settings\Administrator>;tracert -d www.163.com
Tracing route to www.cache.split.netease.com [202.108.9.16]
over a maximum of 30 hops:
1 <10 ms <10 ms 1 ms 172.17.39.254
2 8 ms 9 ms 15 ms 61.148.107.66
3 1 ms 1 ms 1 ms 61.148.107.65
4 1 ms 1 ms 1 ms 61.148.7.5
5 1 ms 1 ms 1 ms 61.148.3.81
6 1 ms 1 ms 1 ms 202.106.193.234
7 1 ms 1 ms 1 ms 202.108.9.16
Trace complete.
C:\Documents and Settings\Administrator>;
19:30:02.101514 172.17.39.1.3216 >; 202.106.46.151.53: [udp sum ok] 57550+ A? www.163.com. (29) (ttl 64, id 39499, len 57)
0x0000 4500 0039 9a4b 0000 4011 1455 ac11 2701 E..9.K..@..U..'.
0x0010 ca6a 2e97 0c90 0035 0025 1bd8 e0ce 0100 .j.....5.%......
0x0020 0001 0000 0000 0000 0377 7777 0331 3633 .........www.163
0x0030 0363 6f6d 0000 0100 01 .com.....
19:30:02.121979 202.106.46.151.53 >; 172.17.39.1.3216: 57550 q: A? www.163.com. 2/0/0 www.163.com. CNAME[|domain] (DF) (ttl 248, id 21551, len 111)
0x0000 4500 006f 542f 4000 f811 623a ca6a 2e97 E..oT/@...b:.j..
0x0010 ac11 2701 0035 0c90 005b 6964 e0ce 8180 ..'..5...[id....
0x0020 0001 0002 0000 0000 0377 7777 0331 3633 .........www.163
0x0030 0363 6f6d 0000 0100 01c0 0c00 0500 0100 .com............
0x0040 0001 de00 1a03 7777 7705 6361 6368 6505 ......www.cache.
0x0050 7370 sp
19:30:02.126124 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39500, len 92)
0x0000 4500 005c 9a4c 0000 0101 78c6 ac11 2701 E..\.L....x...'.
0x0010 ca6c 0910 0800 bcfe 0400 3701 0000 0000 .l........7.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:02.126690 172.17.39.254 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39500, len 92) [tos 0xc0] (ttl 128, id 43437, len 120)
0x0000 45c0 0078 a9ad 0000 8001 e8f5 ac11 27fe E..x..........'.
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a4c 0000 0101 78c6 ac11 2701 ca6c 0910 .L....x...'..l..
0x0030 0800 bcfe 0400 3701 0000 0000 0000 0000 ......7.........
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:02.127498 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39501, len 92)
0x0000 4500 005c 9a4d 0000 0101 78c5 ac11 2701 E..\.M....x...'.
0x0010 ca6c 0910 0800 bbfe 0400 3801 0000 0000 .l........8.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:02.127941 172.17.39.254 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39501, len 92) [tos 0xc0] (ttl 128, id 43438, len 120)
0x0000 45c0 0078 a9ae 0000 8001 e8f4 ac11 27fe E..x..........'.
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a4d 0000 0101 78c5 ac11 2701 ca6c 0910 .M....x...'..l..
0x0030 0800 bbfe 0400 3801 0000 0000 0000 0000 ......8.........
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:02.130623 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39502, len 92)
0x0000 4500 005c 9a4e 0000 0101 78c4 ac11 2701 E..\.N....x...'.
0x0010 ca6c 0910 0800 bafe 0400 3901 0000 0000 .l........9.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:02.131445 172.17.39.254 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39502, len 92) [tos 0xc0] (ttl 128, id 43439, len 120)
0x0000 45c0 0078 a9af 0000 8001 e8f3 ac11 27fe E..x..........'.
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a4e 0000 0101 78c4 ac11 2701 ca6c 0910 .N....x...'..l..
0x0030 0800 bafe 0400 3901 0000 0000 0000 0000 ......9.........
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:03.131998 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 2, id 39507, len 92)
0x0000 4500 005c 9a53 0000 0201 77bf ac11 2701 E..\.S....w...'.
0x0010 ca6c 0910 0800 b9fe 0400 3a01 0000 0000 .l........:.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:03.140078 61.148.107.66 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39507, len 92) (ttl 254, id 43315, len 56)
0x0000 4500 0038 a933 0000 fe01 97a8 3d94 6b42 E..8.3......=.kB
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a53 0000 0101 78bf ac11 2701 ca6c 0910 .S....x...'..l..
0x0030 0800 b9fe 0400 3a01 ......:.
19:30:03.140617 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 2, id 39508, len 92)
0x0000 4500 005c 9a54 0000 0201 77be ac11 2701 E..\.T....w...'.
0x0010 ca6c 0910 0800 b8fe 0400 3b01 0000 0000 .l........;.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:03.149726 61.148.107.66 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39508, len 92) (ttl 254, id 43316, len 56)
0x0000 4500 0038 a934 0000 fe01 97a7 3d94 6b42 E..8.4......=.kB
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a54 0000 0101 78be ac11 2701 ca6c 0910 .T....x...'..l..
0x0030 0800 b8fe 0400 3b01 ......;.
19:30:03.150362 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 2, id 39509, len 92)
0x0000 4500 005c 9a55 0000 0201 77bd ac11 2701 E..\.U....w...'.
0x0010 ca6c 0910 0800 b7fe 0400 3c01 0000 0000 .l........<.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:03.165219 61.148.107.66 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39509, len 92) (ttl 254, id 43317, len 56)
0x0000 4500 0038 a935 0000 fe01 97a6 3d94 6b42 E..8.5......=.kB
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a55 0000 0101 78bd ac11 2701 ca6c 0910 .U....x...'..l..
0x0030 0800 b7fe 0400 3c01 ......<.
19:30:04.151738 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 3, id 39513, len 92)
0x0000 4500 005c 9a59 0000 0301 76b9 ac11 2701 E..\.Y....v...'.
0x0010 ca6c 0910 0800 b6fe 0400 3d01 0000 0000 .l........=.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:04.153226 61.148.107.65 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39513, len 92) [tos 0xc0] (ttl 253, id 64630, len 56)
0x0000 45c0 0038 fc76 0000 fd01 44a6 3d94 6b41 E..8.v....D.=.kA
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a59 0000 0101 78b9 ac11 2701 ca6c 0910 .Y....x...'..l..
0x0030 0800 b6fe 0400 3d01 ......=.
19:30:04.153735 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 3, id 39514, len 92)
0x0000 4500 005c 9a5a 0000 0301 76b8 ac11 2701 E..\.Z....v...'.
0x0010 ca6c 0910 0800 b5fe 0400 3e01 0000 0000 .l........>;.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:04.154974 61.148.107.65 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39514, len 92) [tos 0xc0] (ttl 253, id 64631, len 56)
0x0000 45c0 0038 fc77 0000 fd01 44a5 3d94 6b41 E..8.w....D.=.kA
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a5a 0000 0101 78b8 ac11 2701 ca6c 0910 .Z....x...'..l..
0x0030 0800 b5fe 0400 3e01 ......>;.
19:30:04.155609 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 3, id 39515, len 92)
0x0000 4500 005c 9a5b 0000 0301 76b7 ac11 2701 E..\.[....v...'.
0x0010 ca6c 0910 0800 b4fe 0400 3f01 0000 0000 .l........?.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:04.156847 61.148.107.65 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39515, len 92) [tos 0xc0] (ttl 253, id 64632, len 56)
0x0000 45c0 0038 fc78 0000 fd01 44a4 3d94 6b41 E..8.x....D.=.kA
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a5b 0000 0101 78b7 ac11 2701 ca6c 0910 .[....x...'..l..
0x0030 0800 b4fe 0400 3f01 ......?.
19:30:05.156736 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 4, id 39519, len 92)
0x0000 4500 005c 9a5f 0000 0401 75b3 ac11 2701 E..\._....u...'.
0x0010 ca6c 0910 0800 b3fe 0400 4001 0000 0000 .l........@.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:05.158097 61.148.7.5 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39519, len 92) (ttl 252, id 0, len 56)
0x0000 4500 0038 0000 0000 fc01 a719 3d94 0705 E..8........=...
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a5f 0000 0101 78b3 ac11 2701 ca6c 0910 ._....x...'..l..
0x0030 0800 b3fe 0400 4001 ......@.
19:30:05.158731 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 4, id 39520, len 92)
0x0000 4500 005c 9a60 0000 0401 75b2 ac11 2701 E..\.`....u...'.
0x0010 ca6c 0910 0800 b2fe 0400 4101 0000 0000 .l........A.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:05.159594 61.148.7.5 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39520, len 92) (ttl 252, id 0, len 56)
0x0000 4500 0038 0000 0000 fc01 a719 3d94 0705 E..8........=...
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a60 0000 0101 78b2 ac11 2701 ca6c 0910 .`....x...'..l..
0x0030 0800 b2fe 0400 4101 ......A.
19:30:05.160106 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 4, id 39521, len 92)
0x0000 4500 005c 9a61 0000 0401 75b1 ac11 2701 E..\.a....u...'.
0x0010 ca6c 0910 0800 b1fe 0400 4201 0000 0000 .l........B.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:05.160969 61.148.7.5 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39521, len 92) (ttl 252, id 0, len 56)
0x0000 4500 0038 0000 0000 fc01 a719 3d94 0705 E..8........=...
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a61 0000 0101 78b1 ac11 2701 ca6c 0910 .a....x...'..l..
0x0030 0800 b1fe 0400 4201 ......B.
19:30:06.161605 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 5, id 39527, len 92)
0x0000 4500 005c 9a67 0000 0501 74ab ac11 2701 E..\.g....t...'.
0x0010 ca6c 0910 0800 b0fe 0400 4301 0000 0000 .l........C.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:06.163092 61.148.3.81 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39527, len 92) (ttl 251, id 0, len 56)
0x0000 4500 0038 0000 0000 fb01 abcd 3d94 0351 E..8........=..Q
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a67 0000 0101 78ab ac11 2701 ca6c 0910 .g....x...'..l..
0x0030 0800 b0fe 0400 4301 ......C.
19:30:06.163603 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 5, id 39528, len 92)
0x0000 4500 005c 9a68 0000 0501 74aa ac11 2701 E..\.h....t...'.
0x0010 ca6c 0910 0800 affe 0400 4401 0000 0000 .l........D.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:06.164715 61.148.3.81 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39528, len 92) (ttl 251, id 0, len 56)
0x0000 4500 0038 0000 0000 fb01 abcd 3d94 0351 E..8........=..Q
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a68 0000 0101 78aa ac11 2701 ca6c 0910 .h....x...'..l..
0x0030 0800 affe 0400 4401 ......D.
19:30:06.165227 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 5, id 39529, len 92)
0x0000 4500 005c 9a69 0000 0501 74a9 ac11 2701 E..\.i....t...'.
0x0010 ca6c 0910 0800 aefe 0400 4501 0000 0000 .l........E.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:06.166465 61.148.3.81 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39529, len 92) (ttl 251, id 0, len 56)
0x0000 4500 0038 0000 0000 fb01 abcd 3d94 0351 E..8........=..Q
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a69 0000 0101 78a9 ac11 2701 ca6c 0910 .i....x...'..l..
0x0030 0800 aefe 0400 4501 ......E.
19:30:07.166605 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 6, id 39533, len 92)
0x0000 4500 005c 9a6d 0000 0601 73a5 ac11 2701 E..\.m....s...'.
0x0010 ca6c 0910 0800 adfe 0400 4601 0000 0000 .l........F.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:07.167967 202.106.193.234 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39533, len 92) (ttl 250, id 39535, len 56)
0x0000 4500 0038 9a6f 0000 fa01 c6ed ca6a c1ea E..8.o.......j..
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a6d 0000 0101 78a5 ac11 2701 ca6c 0910 .m....x...'..l..
0x0030 0800 adfe 0400 4601 ......F.
19:30:07.168474 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 6, id 39534, len 92)
0x0000 4500 005c 9a6e 0000 0601 73a4 ac11 2701 E..\.n....s...'.
0x0010 ca6c 0910 0800 acfe 0400 4701 0000 0000 .l........G.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:07.169840 202.106.193.234 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39534, len 92) (ttl 250, id 39536, len 56)
0x0000 4500 0038 9a70 0000 fa01 c6ec ca6a c1ea E..8.p.......j..
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a6e 0000 0101 78a4 ac11 2701 ca6c 0910 .n....x...'..l..
0x0030 0800 acfe 0400 4701 ......G.
19:30:07.170475 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 6, id 39535, len 92)
0x0000 4500 005c 9a6f 0000 0601 73a3 ac11 2701 E..\.o....s...'.
0x0010 ca6c 0910 0800 abfe 0400 4801 0000 0000 .l........H.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:07.171712 202.106.193.234 >; 172.17.39.1: icmp: time exceeded in-transit for 172.17.39.1 >; 202.108.9.16: icmp: echo request [ttl 1] (id 39535, len 92) (ttl 250, id 39537, len 56)
0x0000 4500 0038 9a71 0000 fa01 c6eb ca6a c1ea E..8.q.......j..
0x0010 ac11 2701 0b00 f4ff 0000 0000 4500 005c ..'.........E..\
0x0020 9a6f 0000 0101 78a3 ac11 2701 ca6c 0910 .o....x...'..l..
0x0030 0800 abfe 0400 4801 ......H.
19:30:08.172598 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 7, id 39540, len 92)
0x0000 4500 005c 9a74 0000 0701 729e ac11 2701 E..\.t....r...'.
0x0010 ca6c 0910 0800 aafe 0400 4901 0000 0000 .l........I.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:08.174210 202.108.9.16 >; 172.17.39.1: icmp: echo reply (ttl 58, id 63248, len 92)
0x0000 4500 005c f710 0000 3a01 e301 ca6c 0910 E..\....:....l..
0x0010 ac11 2701 0000 b2fe 0400 4901 0000 0000 ..'.......I.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:08.174721 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 7, id 39541, len 92)
0x0000 4500 005c 9a75 0000 0701 729d ac11 2701 E..\.u....r...'.
0x0010 ca6c 0910 0800 a9fe 0400 4a01 0000 0000 .l........J.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:08.176208 202.108.9.16 >; 172.17.39.1: icmp: echo reply (ttl 58, id 63249, len 92)
0x0000 4500 005c f711 0000 3a01 e300 ca6c 0910 E..\....:....l..
0x0010 ac11 2701 0000 b1fe 0400 4a01 0000 0000 ..'.......J.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:08.176720 172.17.39.1 >; 202.108.9.16: icmp: echo request (ttl 7, id 39542, len 92)
0x0000 4500 005c 9a76 0000 0701 729c ac11 2701 E..\.v....r...'.
0x0010 ca6c 0910 0800 a8fe 0400 4b01 0000 0000 .l........K.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
19:30:08.178207 202.108.9.16 >; 172.17.39.1: icmp: echo reply (ttl 58, id 63250, len 92)
0x0000 4500 005c f712 0000 3a01 e2ff ca6c 0910 E..\....:....l..
0x0010 ac11 2701 0000 b0fe 0400 4b01 0000 0000 ..'.......K.....
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 ................
0x0050 0000 ..
-I Use ICMP ECHO instead of UDP datagrams.
欢迎光临 Chinaunix (http://bbs.chinaunix.net/) | Powered by Discuz! X3.2 |