Chapter15NetworkLayerDetection
2.The"trace"programsendsanIPdatapacketwhoseTTLīæeldintheIPheaderis
2.Inthisway,theaddressofthesecondrouterisobtained.
3.The"trace"programcontinueswiththisprocedureuntilapacketarrivesatthe
destinationhost.
IPTraceidentiīæestheendof"trace"throughthefollowingprocedure:
1.The"trace"programsendsalarge-portUDPdatapackettothedestinationhost,
sothatanyapplicationonthedestinationhostisimpossibletousethatport.
2.Whenthedatapacketarrivesatthehost,theUDPmodulegeneratesanICMP
packetindicatingthattheportisunreachable.
3.Inthisway,byidentifyingwhetherthereceivedICMPpacketisatimeoutpacket
oranunreachableportpacket,thesendingsideknowswhen"trace"ends.
Theinterfacesbetweenthe"trace"moduleandsub-modulesareshowninFigure
15-8.
Figure15-8InterfacesBetweenthe"Trace"ModuleandSub-Modules
ConīgurationCommands
ToconīægureIPtraceonZXR10ZSRV2,runthefollowingcommands:
CommandFunction
ZXR10>trace[vrf<vrf-name>]<ip-address>TracesanIPaddressinuser
mode.
ZXR10#trace[{dcn|vrf<vrf-name>}]{<ip-address>|domain
<domain-name>}[source<source-address>][maxttl<ttl>][timeout
<timeout>]
TracesanIPaddressinprivileged
mode.
ThetracecommandusesICMPerrorpackets.AnICMPerrorpacketisgeneratedwhen
adatapacketexceedsitsTTLvalue.BysendingadatapacketwhoseTTLvalueis1,the
tracecommandtriggerstheīærstroutertodropthepacketandreturnanerrorpacket.A
TTLtimeoutpacketmeansthatanintermediaterouterreceivesthepacketandtherouter
givesupdetection.AnICMPerrorpacketindicatingthedestinationisunreachablemeans
thatthedestinationnodereceivesthepacketbutitcannotsubmitthepacket.Ifthetimer
stopsbeforeareplyarrives,the"trace"programdisplaysa"*"mark.
15-13
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandConīædential