-1

这很奇怪。这实际上是如何工作的。到目前为止,我知道拥有这样的网络是“不可能的”。我将详细解释我的网络是如何工作的。

我有一个局域网。192.168.1.0/24 和路由器在 192.168.1.1,这个路由器有一个公共地址。我可以共享 IP 地址,因为我在那里运行一个服务器进行测试,仅此而已。到目前为止还可以。现在魔术发生了。当我跟踪到 IP 的路由时,我得到了这个(到谷歌 DNS):

traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets
 1  zonhub.home (192.168.1.1)  1.160 ms  1.676 ms  1.340 ms
 2  * * *
 3  10.137.211.97 (10.137.211.97)  12.915 ms  12.526 ms  12.145 ms
 4  10.255.49.90 (10.255.49.90)  10.349 ms 10.255.49.102 (10.255.49.102)  11.483 ms  11.042 ms
 5  80.157.128.249 (80.157.128.249)  34.577 ms 80.157.130.41 (80.157.130.41)  32.917 ms 80.157.130.33 (80.157.130.33)  30.602 ms
 6  mad-sa3-i.MAD.ES.NET.DTAG.DE (217.5.95.161)  33.396 ms 80.157.128.22 (80.157.128.22)  27.107 ms mad-sa3-i.MAD.ES.NET.DTAG.DE (217.5.95.161)  29.510 ms
 7  80.157.128.22 (80.157.128.22)  28.050 ms 72.14.235.20 (72.14.235.20)  32.767 ms 80.157.128.22 (80.157.128.22)  27.932 ms
 8  72.14.235.20 (72.14.235.20)  29.780 ms 72.14.235.18 (72.14.235.18)  27.020 ms  26.706 ms
 9  216.239.43.233 (216.239.43.233)  49.456 ms 209.85.240.191 (209.85.240.191)  44.034 ms 216.239.43.233 (216.239.43.233)  51.935 ms
10  72.14.236.191 (72.14.236.191)  53.374 ms 209.85.253.20 (209.85.253.20)  50.699 ms 216.239.43.233 (216.239.43.233)  44.918 ms
11  209.85.251.231 (209.85.251.231)  50.151 ms * 216.239.49.45 (216.239.49.45)  47.309 ms
12  google-public-dns-a.google.com (8.8.8.8)  51.536 ms  50.180 ms  45.505 ms

什么是第 2、第 3 和第 4 跳?当 192.168.1.1 运行 NAT 服务时,它如何位于 A 类私有地址上,其中我有我的 LAN 和我的外部 3 个公共地址(是的,我有 3 个并且是 88、89、93 网络上的 3 个“A 类”IP) .

另一件事是如何在第 4 跳我们有第 2 个八位字节 255?

任何人都可以随意跟踪我的无 IP 域:synackfiles.no-ip.org 只是不要弄乱我的路由器(如果您进行端口扫描或无法登录 ssh 或 http 身份验证,它会阻塞,因此您会因此被禁止。如果你只是跟踪路由就可以了):P

现在,第二个魔法和奇怪的事情发生了。我要运行nmap。所以我明白了:

sudo nmap -sV -A -O 10.137.211.113 -vv -p 1-500 -Pn

Starting Nmap 6.00 ( http://nmap.org ) at 2013-11-14 15:24 WET
NSE: Loaded 93 scripts for scanning.
NSE: Script Pre-scanning.
NSE: Starting runlevel 1 (of 2) scan.
NSE: Starting runlevel 2 (of 2) scan.
Initiating Parallel DNS resolution of 1 host. at 15:24
Completed Parallel DNS resolution of 1 host. at 15:24, 0.04s elapsed
Initiating SYN Stealth Scan at 15:24
Scanning 10.137.211.113 [500 ports]
SYN Stealth Scan Timing: About 30.40% done; ETC: 15:26 (0:01:11 remaining)
SYN Stealth Scan Timing: About 60.30% done; ETC: 15:26 (0:00:40 remaining)
Completed SYN Stealth Scan at 15:26, 101.14s elapsed (500 total ports)
Initiating Service scan at 15:26
Initiating OS detection (try #1) against 10.137.211.113
Initiating Traceroute at 15:26
Completed Traceroute at 15:26, 9.05s elapsed
Initiating Parallel DNS resolution of 1 host. at 15:26
Completed Parallel DNS resolution of 1 host. at 15:26, 0.01s elapsed
NSE: Script scanning 10.137.211.113.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 15:26
Completed NSE at 15:26, 0.00s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Nmap scan report for 10.137.211.113
Host is up (0.0010s latency).
All 500 scanned ports on 10.137.211.113 are filtered
Device type: general purpose|specialized|media device
Running: Barrelfish, Microsoft Windows 2003|PocketPC/CE|XP, Novell NetWare 3.X, Siemens embedded, Telekom embedded
OS CPE: cpe:/o:barrelfish:barrelfish cpe:/o:microsoft:windows_server_2003::sp1 cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_ce cpe:/o:microsoft:windows_xp:::professional cpe:/o:novell:netware:3.12
Too many fingerprints match this host to give specific OS details
TCP/IP fingerprint:
SCAN(V=6.00%E=4%D=11/14%OT=%CT=%CU=%PV=Y%G=N%TM=5284EBAB%P=armv7l-unknown-linux-gnueabi)
T7(R=Y%DF=N%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=R)
U1(R=N)
IE(R=N)


TRACEROUTE (using proto 1/icmp)
HOP RTT     ADDRESS
1   2.32 ms zonhub.home (192.168.1.1)
2   ... 30

NSE: Script Post-scanning.
NSE: Starting runlevel 1 (of 2) scan.
NSE: Starting runlevel 2 (of 2) scan.
Read data files from: /usr/bin/../share/nmap
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 122.65 seconds
           Raw packets sent: 1109 (49.620KB) | Rcvd: 4 (200B)

嗯,这很奇怪。我不知道我国的广域网是如何设计和建造的。我来自葡萄牙,我的 ISP 是“ZON TVCABO”。您现在可以搜索。:P 这非常非常非常有趣..

真挚地,

整数3

4

1 回答 1

0
  • 我无法告诉您您的提供商 WAN 是如何构建的——但为了节省公共 IP——可以设计一个带有私有 IP 的 ISP 内部网络。不需要从公共可用的路由器将仅具有私有 IP - 分配给您的 IP 可以通过仅在内部作为 ISP 的路由器路由到您的上行链路。

  • 第二跳不允许跟踪,但允许转发它们。

  • 第 4 个 - 10.255.xx 是 10.0.0.0/8 A 范围内的私有 IP。(您可以使用 0-255 之间的数字)

于 2014-01-21T09:07:06.330 回答