<?xml version="1.0" encoding="UTF-8"?>
<peek_trace_notes version="1.0"><trace_file name="C:\wp\eng\branches\peek-win\4.9.0\src\peek-win\Installers\EtherPeek NX\Program Files\Samples\Traceroute.pkt" captured="2958462422711646" packets="58"/><summary>This file demonstrates how the traceroute program works.  A host across the Internet is sent a UDP packet.  The time to live value in the IP header starts at one and is incremented until a reply from the target machine is received.  Each router checks the "Time to live" value (TTL) then sends a "TTL exceed in transit" message, which enables the operator to discover the IP address of routers along the way.</summary><packet id="7"><notes><![CDATA[This is a <STRONG><FONT color=#000080>UDP</FONT></STRONG> packet directed at the target machine.&nbsp; The IP header contains a TTL=2 so this packet will get bounced back at the&nbsp;second router that it hits.]]></notes></packet><packet id="5"><notes><![CDATA[After receiving a message from the router, a reverse <STRONG><FONT color=#000080>DNS</FONT></STRONG> query is performed to attempt to translate the address into a name.]]></notes></packet><packet id="4"><notes><![CDATA[This is a message from the first router saying that the TTL was exceeded in transit.&nbsp; This lets us know the router's IP address.]]></notes></packet><packet id="3"><notes><![CDATA[This is a <STRONG><FONT color=#000080>UDP</FONT></STRONG> packet directed at the target machine.&nbsp; The IP header contains a TTL=1 so this packet will get bounced back at the first router that it hits.]]></notes></packet><packet id="2"><notes><![CDATA[<FONT color=#000080><STRONG>DNS</STRONG></FONT> reply.&nbsp; The address is 149.43.1.2]]></notes></packet><packet id="1"><notes><![CDATA[This is the DNS query to establish the IP address of the target machine.&nbsp; If you would like to learn more about how to perform protocol analysis, please visit us at: http://www.wildpacketsacademy.com]]></notes></packet><packet id="56"><notes><![CDATA[Finally the target sends back a message indicating that the packet arrived, but no process was listening on the port.&nbsp; The traceroute is now complete, except for the final reverse <FONT color=#000080><STRONG>DNS</STRONG></FONT> queries.]]></notes></packet></peek_trace_notes>
