Re: [tcptra-dev] tcptraceroute-1.5beta6; DNAT detection

[Thomas Springer <tuevsec@gmx.net>]

Michael,

I'm *very* pleased too - thanks for the work.
It seems to work fine here (debian i386), allthough only with 
--track-port enabled. I didn't crosscheck with tcpdump!

Some hosts tcptraceroute calls DNATted:
tcptraceroute --track-port --dnat -q 2 www.siemens.ch
tcptraceroute --track-port --dnat -q 2 www.siemens.com
tcptraceroute --track-port --dnat -q 2 www.activestate.com
tcptraceroute --track-port --dnat -q 2 www.spiegel.de
tcptraceroute --track-port --dnat -q 2 www.verio.net
tcptraceroute --track-port --dnat -q 2 www.strato.de
tcptraceroute --track-port --dnat -q 2 www.whitehouse.org

and many many other bigger sites.
to get more output just take the perl-code from the last php-worm to 
search google for domainnames and let it dump'n grep ... :)

Thomas

_______________________________________________
tcptraceroute-dev mailing list
tcptraceroute-dev@netisland.net
http://lists.netisland.net/mailman/listinfo/tcptraceroute-dev