2) Tracerouting from multiple locations can give you a good idea.
3) Service/system identification scans can give you a good idea.
4) Observations of target behavior can give you a good idea.
5) Ask the client if they're blocking traffic from your source address.
First the output you've provided does not match the command you've quoted. If you did --traceroute you should have hop counts and info.I tried hping3 (XXX.XXX.XXX.XXX is the IP Address):
And noticed that there are 2 devices responding (different ID's on the TCP packet). Is this assumption correct? Here it goes the output:Code:hping3 -S -p 25 --traceroute -V XXX.XXX.XXX.XXX
Could anyone with good TCP-IP knowledg help me out?Code:len=44 ip=XXX.XXX.XXX.XXX ttl=58 DF id=29792 tos=0 iplen=44 sport=25 flags=SA seq=11 win=5840 rtt=17.3 ms seq=3388072850 ack=224301 sum=eacf urp=0 len=44 ip=XXX.XXX.XXX.XXX ttl=58 DF id=55392 tos=0 iplen=44 sport=25 flags=SA seq=12 win=5840 rtt=19.1 ms seq=3528531323 ack=1238135492 sum=413d urp=0 DUP! len=44 ip=XXX.XXX.XXX.XXX ttl=58 DF id=56672 tos=0 iplen=44 sport=25 flags=SA seq=8 win=5840 rtt=4066.7 ms seq=544745881 ack=979545101 sum=21b9 urp=0 DUP! len=44 ip=XXX.XXX.XXX.XXX ttl=58 DF id=52577 tos=0 iplen=44 sport=25 flags=SA seq=11 win=5840 rtt=3463.8 ms seq=3388072850 ack=224301 sum=eacf urp=0 len=44 ip=XXX.XXX.XXX.XXX ttl=58 DF id=1122 tos=0 iplen=44 sport=25 flags=SA seq=15 win=5840 rtt=14.1 ms seq=3627026674 ack=2133064936 sum=6c8c urp=0
Thanks in advance!
I'm pretty sure those marked with DUP! are duplicates, retransmitted for whatever reason. In the results you've quoted it seems packet 4 is a duplicate of packet 1. id should be different for every packet, even those that are retransmitted. From just these limited hping3 results I don't see anything that would lead me to believe XXX.XXX.XXX.XXX is a IDS or FW, there are insufficient details to draw a conclusion.
PS - Your sig seems amusingly applicable in response to your post.
"If you can't describe what you are doing as a process, you don't know what you're doing."
W. Edwards Deming