Page 4 - CPTE_Lab_Guide_Sample

Official Student Lab Guide

Lab 4 – Detecting Live Systems

4. Now, find out what happens when TTL (Time to Live) expires. Every packet in the network has
TTL defined. If TTL reaches 0, the router discards the packet. This mechanism prevents the loss
of packets.
5. In the command prompt, Type: ping www.mile2hackworld.com -i 3
a. The displayed response should be similar to the one shown in the following figure but
with a different IP address.

i. Reply from 130.81.110.226: TTL expired in transit means that the router
(130.81.110.226, students will have some other IP address) discarded the frame
because its TTL has expired (reached 0)
6. Emulate the traceroute command, using ping - manually, find the route from your PC to
www.mile2hackworld.com

NOTE: The results you receive may be different from those in this lab. Your results may also be
different from those of the person sitting next to you simply because your system is not in the exact
same place.

Report piracy if the fingerprint in this box is of poor resolution!
a. At the command prompt, Type: ping www.mile2hackworld.com –i 1 -n 1
(Use –n 1 to produce only one answer, instead of receiving four answers on Windows or
pinging forever on Linux.) The displayed response should be similar to the one shown in
the following figure.
b. We have received the answer from the same IP address in step one. This one identifies a
firewall or a router. Some firewalls do not decrement TTL and are therefore invisible.

c. Perform this scan by incrementing each item by one until you get the same IP address
that www.mile2hackworld.com is reporting

P a g e | 52 Certified Penetration Testing Engineer – v06.3.1.4
©Mile2 – All Rights Reserved