2013-11-14 72 views
-1

这很奇怪。这实际上如何工作。到目前为止,我知道拥有这样的网络是“不可能的”。 我将详细解释我的网络是如何工作的。互联网提供商与“私人广域网”的客户?

我有一个局域网。 192.168.1.0/24和路由器是在192.168.1.1,这个路由器有一个公共地址。 我可以共享IP地址,因为我在那里运行一个服务器,不用再做任何测试。到目前为止没有问题。 现在神奇的事情发生了。 当我跟踪到一个IP,我得到这个(到谷歌DNS)路线:

traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets 
1 zonhub.home (192.168.1.1) 1.160 ms 1.676 ms 1.340 ms 
2 * * * 
3 10.137.211.97 (10.137.211.97) 12.915 ms 12.526 ms 12.145 ms 
4 10.255.49.90 (10.255.49.90) 10.349 ms 10.255.49.102 (10.255.49.102) 11.483 ms 11.042 ms 
5 80.157.128.249 (80.157.128.249) 34.577 ms 80.157.130.41 (80.157.130.41) 32.917 ms 80.157.130.33 (80.157.130.33) 30.602 ms 
6 mad-sa3-i.MAD.ES.NET.DTAG.DE (217.5.95.161) 33.396 ms 80.157.128.22 (80.157.128.22) 27.107 ms mad-sa3-i.MAD.ES.NET.DTAG.DE (217.5.95.161) 29.510 ms 
7 80.157.128.22 (80.157.128.22) 28.050 ms 72.14.235.20 (72.14.235.20) 32.767 ms 80.157.128.22 (80.157.128.22) 27.932 ms 
8 72.14.235.20 (72.14.235.20) 29.780 ms 72.14.235.18 (72.14.235.18) 27.020 ms 26.706 ms 
9 216.239.43.233 (216.239.43.233) 49.456 ms 209.85.240.191 (209.85.240.191) 44.034 ms 216.239.43.233 (216.239.43.233) 51.935 ms 
10 72.14.236.191 (72.14.236.191) 53.374 ms 209.85.253.20 (209.85.253.20) 50.699 ms 216.239.43.233 (216.239.43.233) 44.918 ms 
11 209.85.251.231 (209.85.251.231) 50.151 ms * 216.239.49.45 (216.239.49.45) 47.309 ms 
12 google-public-dns-a.google.com (8.8.8.8) 51.536 ms 50.180 ms 45.505 ms 

什么是第二,第三和第四跳?如果192.168.1.1正在运行NAT服务,那里有我的局域网和外部3个公共地址(是的,我有3个,并且在88,89,93网络上有3个“A类”IP),它怎么会在A类私有地址上? 。

另一件事就是如何在第四跳我们有第二个八位字节255?

任何人都可以自由地跟踪我的no-ip域名:synackfiles.no-ip.org 只是不要惹我的路由器(它阻塞,如果你端口扫描或无法登录在SSH或HTTP身份验证,所以你如果你只是跟踪它是好的):P

现在,第二个奇迹般的东西发生了。 我要运行nmap。所以我得到这个:

sudo nmap -sV -A -O 10.137.211.113 -vv -p 1-500 -Pn 

Starting Nmap 6.00 (http://nmap.org) at 2013-11-14 15:24 WET 
NSE: Loaded 93 scripts for scanning. 
NSE: Script Pre-scanning. 
NSE: Starting runlevel 1 (of 2) scan. 
NSE: Starting runlevel 2 (of 2) scan. 
Initiating Parallel DNS resolution of 1 host. at 15:24 
Completed Parallel DNS resolution of 1 host. at 15:24, 0.04s elapsed 
Initiating SYN Stealth Scan at 15:24 
Scanning 10.137.211.113 [500 ports] 
SYN Stealth Scan Timing: About 30.40% done; ETC: 15:26 (0:01:11 remaining) 
SYN Stealth Scan Timing: About 60.30% done; ETC: 15:26 (0:00:40 remaining) 
Completed SYN Stealth Scan at 15:26, 101.14s elapsed (500 total ports) 
Initiating Service scan at 15:26 
Initiating OS detection (try #1) against 10.137.211.113 
Initiating Traceroute at 15:26 
Completed Traceroute at 15:26, 9.05s elapsed 
Initiating Parallel DNS resolution of 1 host. at 15:26 
Completed Parallel DNS resolution of 1 host. at 15:26, 0.01s elapsed 
NSE: Script scanning 10.137.211.113. 
NSE: Starting runlevel 1 (of 2) scan. 
Initiating NSE at 15:26 
Completed NSE at 15:26, 0.00s elapsed 
NSE: Starting runlevel 2 (of 2) scan. 
Nmap scan report for 10.137.211.113 
Host is up (0.0010s latency). 
All 500 scanned ports on 10.137.211.113 are filtered 
Device type: general purpose|specialized|media device 
Running: Barrelfish, Microsoft Windows 2003|PocketPC/CE|XP, Novell NetWare 3.X, Siemens embedded, Telekom embedded 
OS CPE: cpe:/o:barrelfish:barrelfish cpe:/o:microsoft:windows_server_2003::sp1 cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_ce cpe:/o:microsoft:windows_xp:::professional cpe:/o:novell:netware:3.12 
Too many fingerprints match this host to give specific OS details 
TCP/IP fingerprint: 
SCAN(V=6.00%E=4%D=11/14%OT=%CT=%CU=%PV=Y%G=N%TM=5284EBAB%P=armv7l-unknown-linux-gnueabi) 
T7(R=Y%DF=N%TG=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=R) 
U1(R=N) 
IE(R=N) 


TRACEROUTE (using proto 1/icmp) 
HOP RTT  ADDRESS 
1 2.32 ms zonhub.home (192.168.1.1) 
2 ... 30 

NSE: Script Post-scanning. 
NSE: Starting runlevel 1 (of 2) scan. 
NSE: Starting runlevel 2 (of 2) scan. 
Read data files from: /usr/bin/../share/nmap 
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ . 
Nmap done: 1 IP address (1 host up) scanned in 122.65 seconds 
      Raw packets sent: 1109 (49.620KB) | Rcvd: 4 (200B) 

嗯,这很奇怪。我不知道我的国家的广域网是如何设计和建造的。 我来自葡萄牙,我的ISP是“ZON TVCABO”。你现在可以搜索。 :P 这是非常非常非常有趣..

真诚,

INT3

回答

0
  • 我不能告诉你,你的供应商广域网怎么建 - 但为了 节省公共IP地址 - 一个可以使用私有IP地址设计ISP内部网络。不需要公开的路由器 只有私有IP--分配给您的IP可通过仅在ISP内部的路由器路由到您的 上行链路。

  • 第二跳没有允许跟踪,但允许转发它们。

  • 4th - 10.255.x.x是10.0.0.0/8 A范围内的私有IP。 (你的 可以使用0-255的数字)