Re: How to interpret following nmap's traceroute output.

[Robin Wood <robin@digi.ninja>]

I can't answer the nmap question but I'm curious, what does standard
traceroute to the two IPs show?

What IP are you on and what is the subnet? Is 10.0.30.138 the default
gateway defined on the host?

Robin

On Tue, 23 Jun 2020 at 14:21, Karel Gardas <karel.gardas () centrum cz> wrote:

> Hello,
>
> I'm experimenting with nmap for network topology scanning and discovery
> and sometime it surprises me with what I find in its trace records.
> Currently I'm not able to interpret this record:
>
>    Nmap scan report for 10.111.0.99
>  [...]
>    1   0.89 ms _gateway (10.0.30.138)
>    2   1.47 ms 10.0.10.14
>    3   ... 4
>    5   2.26 ms 10.111.0.99
>  [...]
>
> while record for 10.0.10.14 looks as:
>    Nmap scan report for 10.0.10.14
>  [...]
>    1   0.31 ms 10.0.10.14
>
> so I'm not sure how to interpret hop 3 and 4 of 10.111.0.99 above when
> 10.0.10.14 is reachable only with one hop hence does not provide any hop
> 3 and 4.
>
> The nmap is version 7.60 as distributed and run on Ubuntu 18.04.x LTS
> with root privileges and with command-line parameters:
>
> -T4 10.1.0.0/24 10.0.10.0/24 10.0.20.0/24 10.0.30.0/24 10.0.60.0/24
> 10.11.0.0/24 10.111.0.0/24 10.112.0.0/24 10.111.1.0/24 10.111.2.0/24
> --stats-every <http://10.111.2.0/24--stats-every> 5s --traceroute
>
> Any idea?
>
> Thanks!
> Karel
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/