HowTo Use The Scapy: Multi-Traceroute - MTR

From NST Wiki
Jump to navigationJump to search

Overview

Note: Now integrated with the Scapy Project.


A Multi-Traceroute (MTR) networking tool has been developed in NST 24. This tool provides an interactive Traceroute visual using Scapy similar to the Traceroute Command and has been integrated into the NST WUI. NST uses the Python 3 version of Scapy known as Scapy3k. Results from the tool can expose load balance tiers and NAT.

The Scapy command: mtr (Multi-Traceroute) has been developed. It is an enhanced version of the original Scapy traceroute command. It includes new features such as running multiple queries with each target, display of Round Trip Time (RTT) calculations, selection of using Network Protocols: TCP, UDP and ICMP and enhanced SVG graphical results.

Some NST WUI key enhancements include a GUI options interface, an interactive MTR SVG graphic, NST IPv4 Address Tools integration, IPv4 Address Geolocation, MTR session Packet Capture, ASN lookup, MTR historical session selection and management, MTR SVG graphic editing, MTR session console output access and SVG Graphic image conversion.

The following sections include the results of running an out of the box simple MTR trace and also the results from a more complex session. Please refer to the MTR Reference Document for additional information on using MTR.

Simple Trace

Using the Scapy Multi-Traceroute page can be as simple as entering the host name you want to perform the trace on (www.techhounds.com in the example below) and pressing the Run button.


Scapy: Multi-traceroute MTR - Simple Trace

Once the trace completes you will get a graphical chart (i.e., As an SVG image shown below) that contains:

  • The list of IPv4 Addresses exposed by the trace (clicking on an IPv4 Address will bring up the IPv4 Address Tools widget).
  • Round Trip Time measurements (RTT) from the Source (Probe) to each Segment (Gateway or Hop) of the trace.
  • Autonomous System Number (ASN) clusters (when possible) for each segment of the trace.

Click to open the Simple MTR Session as an SVG Graphic only: Simple SVG Session Only.

Note: To scale the MTR Session SVG graphic below without losing resolution use your browser's zoom controls (i.e., Windows / Linux: Ctrl+, Ctrl- Ctrl0 or on Mac OS X: Cmd+, Cmd- or Cmd0)


Your browser does not support SVG


Complex Trace

Two (2) Targets were used to produce this somewhat more complex MTR Session SVG graphic: www.google.com and www.cnn.com.

Click to open the Complex MTR Session as an SVG Graphic only: Complex SVG Session Only.

Note: To scale the MTR Session SVG graphic below without losing resolution use your browser's zoom controls (i.e., Windows / Linux: Ctrl+, Ctrl- Ctrl0, Mac OS X: Cmd+, CMD- or Cmd0)


Your browser does not support SVG


NAT Detection

One can detect one or more gateways that have been configured for Network Address Translation (NAT) using MTR. The example MTR session below shows two (2) gateways that are using NAT (i.e., Trace 1 segment: 13 and Trace 1 segment: 14) at the bottom of the image.

Scapy: Multi-traceroute (MTR) Network Address Translation (NAT) Detection

 

Scapy: Multi-Traceroute (MTR) Reference Document

Use the document below to serve as a reference when using the Scapy Multi-Traceroute (MTR) NST WUI page. The Information section on the NST WUI page also provides access to Scapy and MTR supporting documents.

Scapy: Multi-traceroute (MTR) Reference Document