Re: hopfake question.

On 9/16/05, Jorge Alfredo Garcia <frederix@gmail.com> wrote:
> im trying hopkake by xenion to do some testings about traceroute.
> Im having some problem testing the code from different locations for
> example a traceroute from my own country against an ip on my conutry
> works fine:
>
> C:\>tracert 200.125.36.216

[snip]

> [root@ns20303 dark]# traceroute 200.125.34.234

> As you can see the fake hops not appear in the attackers host.
> I tested a lot and in the majority of the case its seems it doesnt works.
> Please, i want to know why this problem and if it is there a
> posibility to fix it.

You're using two different commands from two different operating
systems.  Linux/Unix uses UDP for traceroute, Windows uses TCP for
tracert.  If you used tcptraceroute, you'd see the same results, since
you'd be doing the same thing.

The fix is to extend the software to fake UDP as well.

Paul
-- 
www.compuwar.net

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------