Difference between revisions of "Traceroute notes"

From thelinuxwiki
Jump to: navigation, search
Line 6: Line 6:
 
  The specified type of tracerouting is allowed for superuser only<br><br>
 
  The specified type of tracerouting is allowed for superuser only<br><br>
  
−
Most Linux distros  don’t allow the –I switch for traceroute by regular users by default.  Traceroute would have to be configured by enabling the setuid bit or with a setcap modification.<br><br>  
+
Most Linux distros  don’t allow the –I switch for traceroute by regular users by default.  Traceroute would have to be configured by enabling the setuid bit or with a setcap modification.<br><br>  
  
 
example using setcap:<br>
 
example using setcap:<br>

Revision as of 15:54, 1 November 2026


permissions

$ traceroute -I 4.2.2.2
The specified type of tracerouting is allowed for superuser only

Most Linux distros don’t allow the –I switch for traceroute by regular users by default. Traceroute would have to be configured by enabling the setuid bit or with a setcap modification.

example using setcap:

Setting...
# setcap cap_net_raw+ep /usr/bin/traceroute
viewing..
# getcap /usr/bin/traceroute
/usr/bin/traceroute = cap_net_raw+ep

for more info see manpages for setuid or setcap

using icmp

$ traceroute -I 4.2.2.2

specifying a port (tcp)

$ sudo traceroute -T -p 443 -n -q 1 192.168.1.100