Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 55 guests and 3 members online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Firewalk: Scan aborted: hopcount exceeded.
EH-Net
May 23, 2013, 08:39:06 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Firewalk: Scan aborted: hopcount exceeded.  (Read 3026 times)
0 Members and 1 Guest are viewing this topic.
badams_iyns
Newbie
*
Offline Offline

Posts: 3


View Profile
« on: June 04, 2010, 08:06:06 PM »

Ok, this statement will show my Ignorance…

I get this error in firewalk. Scan aborted: hopcount exceeded.
When I do a simple traceroute it’s 17 hops every time.

I'm doing this:
firewalk -s25 -d25 -pTCP XXX.XXX.XXX.XXX XXX.XXX.XXX.XXX
The ip range is /28

Thanks! I hope...
Logged
hayabusa
Hero Member
*****
Offline Offline

Posts: 1633



View Profile
« Reply #1 on: June 05, 2010, 08:53:32 AM »

Hints:

try using the -t switch, to set the initial TTL (hopcount):

"-t 1-25 (1)Sets initial IP TTL value (target gateway is known to be n hops from the
source host, the TTL can be preloaded to facilitate a faster scan.)"

If you then continue to get hopcount exceeded, you can also tweak the -x switch:

"-x expire vector (1)

The expire vector is the number of hops that the scanning probes will expire, past the gateway host. The binding hopcount is the hopcount of the gateway + the expire vector."

Logged

~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'


OSCE, OSCP , GPEN, C|EH
badams_iyns
Newbie
*
Offline Offline

Posts: 3


View Profile
« Reply #2 on: June 06, 2010, 04:38:50 PM »

I haven't gone through all the possible permutations... I've gone all the way through the -t i.e. -t1, -t2...etc. and now I'm trying -x1 -t1, -x1 -t2...

But so far no luck. Is this one that should be run from outside the firewall?
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.054 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.