How Traceroute Works

The traceroute is one of the most powerful tools to use when troubleshooting routing issues. But how does a traceroute actually work?

When we perform a traceroute to a certain destination, the source sends initially an ICMP Echo Request with a Time-To-Live (TTL) value 1. This means that when that packet reaches the first hop, the TTL will expire and the router will drop the packet sending back to the source an ICMP Time Exceeded error message (this will be the first hop in the traceroute). Continuously, the source sends a new ICMP Echo Request with TTL value 2 this time. That packet will reach the second router in the path and then it will be dropped sending back an ICMP Time Exceeded error message (this will be the second hop in the traceroute). The source repeats the same process by sending new ICMP Echo Requests and increasing each time the TTL value by 1. This continues till the final ICMP Echo Request reaches the actual destination, which returns an ICMP Echo Reply back to the source (this will be the last hop in the traceroute). The picture below represents a traceroute process where A is the source and D is the destination router:

traceroute

For each new TTL value, the source will send an ICMP Echo Request three times, so for each hop we will get three results. The results show the IP address of each hop (or domain name if available) and also the Round Trip Time (RTT). When a hop is unreachable, the traceroute shows a star symbol (*) instead. The picture below shows how a traceroute output looks like in a Cisco router:

traceroute2

A traceroute can be used in order to troubleshoot different kind of network issues, such as delay, asymmetric routing, IP filtering, etc. In a later post, I will explain more in detail how to troubleshoot these different types of fault with the help of traceroute.

Advertisements

About TelcoNotes

IP & VoIP networking

Posted on February 8, 2013, in IP Routing and tagged , . Bookmark the permalink. 1 Comment.

  1. Greetings I am so thrilled I found your blog, I really found you
    by mistake, while I was searching on Askjeeve for something else, Regardless I am here now and
    would just like to say cheers for a incredible post and a all
    round thrilling blog (I also love the theme/design), I don’t
    have time to go through it all at the moment but I have bookmarked it
    and also included your RSS feeds, so when I have time I will be back to
    read much more, Please do keep up the fantastic job.

Leave a Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: