search

aeden / traceroute

Go Traceroute library
MIT License
179 stars 75 forks source link

multiple users on one machine , or any icmp requests to host creates false positives #6

Open dbillor opened 4 years ago

dbillor commented 4 years ago

Repro: run ping to any host,

dbillor@netdev2-westus2:~$ ping bn6-0100-0002-01sw
PING bn6-0100-0002-01sw.aznet.gbl (25.184.112.234) 56(84) bytes of data.
64 bytes from BN6-0100-0002-01SW.aznet.gbl (25.184.112.234): icmp_seq=1 ttl=48 time=62.2 ms
64 bytes from BN6-0100-0002-01SW.aznet.gbl (25.184.112.234): icmp_seq=2 ttl=48 time=62.2 ms
64 bytes from BN6-0100-0002-01SW.aznet.gbl (25.184.112.234): icmp_seq=3 ttl=48 time=62.2 ms
64 bytes from BN6-0100-0002-01SW.aznet.gbl (25.184.112.234): icmp_seq=4 ttl=48 time=62.2 ms

while ping is going run traceroute to any other host you will see entries of icmp requests from the ping to the initial host.

traceroute to ibr02.mwh01 (25.184.240.242), 65 hops max, 52 byte packets
1   MWH03-0101-0304-04T0-lo.aznet.gbl. (25.101.225.21)  550.236µs
2   MWH03-0101-0304-15T1-lo.aznet.gbl. (25.101.224.224)  562.237µs
3   MWH03-0101-0100-01T2-lo.aznet.gbl. (25.101.224.0)  551.736µs
4   MWH01-0100-0200-08RHW-lo.aznet.gbl. (10.244.23.41)  498.233µs
5   MWH01-0100-0100-02RA-lo.aznet.gbl. (10.244.23.1)  464.931µs
6   25.75.128.68 (25.75.128.68)  770.45µs
7   be-142-0.ibr03.mwh01.ntwk.msn.net. (104.44.21.163)  1.565803ms
8   ae141-0.icr01.mwh01.ntwk.msn.net. (104.44.21.156)  6.031596ms
9   MWH01-0100-0100-02MA.aznet.gbl. (25.75.131.15)  773.851µs
10  MWH01-0100-0103-01M1.aznet.gbl. (25.75.131.7)  1.212879ms
11  25.184.240.207 (25.184.240.207)  1.016467ms
12  BN6-0100-0002-01SW.aznet.gbl. (25.184.112.234)  308.874275ms
13  25.184.240.207 (25.184.240.207)  1.021867ms
14  25.184.240.207 (25.184.240.207)  1.163577ms
15  BN6-0100-0002-01SW.aznet.gbl. (25.184.112.234)  35.935159ms

This is due to just blindly looking at icmp requests in the receive socket.

niltooth commented 2 years ago

@dbillor did you ever find a resolution to this?