Difference between revisions of "Traceroute notes"
From thelinuxwiki
(Pushed from Themanclub.) |
|||
| (3 intermediate revisions by one user not shown) | |||
| Line 1: | Line 1: | ||
| − | $ '''traceroute -I 4.2.2.2'''<br> | + | |
| − | The specified type of tracerouting is allowed for superuser only<br><br> | + | |
| + | == permissions for using icmp== | ||
| + | |||
| + | $ '''traceroute -I 4.2.2.2'''<br> | ||
| + | The specified type of tracerouting is allowed for superuser only<br><br> | ||
Most Linux distros don’t allow the –I switch for traceroute by regular users by default. Traceroute would have to be configured by enabling the setuid bit or with a setcap modification.<br><br> | Most Linux distros don’t allow the –I switch for traceroute by regular users by default. Traceroute would have to be configured by enabling the setuid bit or with a setcap modification.<br><br> | ||
example using setcap:<br> | example using setcap:<br> | ||
| − | Setting...<br> | + | Setting...<br> |
# '''setcap cap_net_raw+ep /usr/bin/traceroute''' | # '''setcap cap_net_raw+ep /usr/bin/traceroute''' | ||
| − | viewing..<br> | + | viewing..<br> |
# '''getcap /usr/bin/traceroute'''<br> | # '''getcap /usr/bin/traceroute'''<br> | ||
/usr/bin/traceroute = cap_net_raw+ep | /usr/bin/traceroute = cap_net_raw+ep | ||
for more info see manpages for setuid or setcap | for more info see manpages for setuid or setcap | ||
| + | |||
| + | == specifying a port (tcp) == | ||
| + | $ '''sudo traceroute -T -p 443 -n -q 1 192.168.1.100''' | ||
[[Category:linux]] | [[Category:linux]] | ||
Latest revision as of 15:54, 1 November 2026
permissions for using icmp
$ traceroute -I 4.2.2.2
The specified type of tracerouting is allowed for superuser only
Most Linux distros don’t allow the –I switch for traceroute by regular users by default. Traceroute would have to be configured by enabling the setuid bit or with a setcap modification.
example using setcap:
Setting...
# setcap cap_net_raw+ep /usr/bin/traceroute
viewing..
# getcap /usr/bin/traceroute
/usr/bin/traceroute = cap_net_raw+ep
for more info see manpages for setuid or setcap
specifying a port (tcp)
$ sudo traceroute -T -p 443 -n -q 1 192.168.1.100
