Traceroute
Description
This indicates an attempt to learn the topology of a target network using the traceroute utility.
Traceroute was originally designed for network debugging. Using the Time-To-Live (TTL) field of IP headers and the Time Exceeded error message of the Internet Control Message Protocol (ICMP), traceroute can map out the source-to-destination path of an IP packet. An attacker can use traceroute to gain knowledge of a target network. The information gathered may assist future attacks.
Affected Products
Any host or networking equipment connected to the Internet is susceptible to traceroute.
Impact
Leak of network topology information may assist future attacks.
Recommended Actions
N/A
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |