[c-nsp] Hidiing a traceroute

Adam Armstrong lists at memetic.org
Sun Oct 11 11:40:40 EDT 2009


Jason Alex wrote:
> Dear All,
>              I want to hide a traceroute hops inside my network
> i know you can hide the traceroute inside an MPLS network
>
> can we hide also the traceroute inside an IP network
>   
The number of hops? not unless you know a way to disable the TTL 
decrementing mechanism, no.

The identity of hops? Block ICMP Time Exceeded. For example :
access-list 100 deny icmp any any ttl-exceeded
> CCIE#24775
Oh man. How many Weetos tokens did you have to collect for that?

adam.


More information about the cisco-nsp mailing list