Admin: Text replacement - "Category:Wiki" to "Category:Wiki '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "

2026-01-17T08:14:06Z

Text replacement - "Category:Wiki" to "Category:Wiki '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "

← Older revision		Revision as of 08:14, 17 January 2026
Line 1:		Line 1:
	[[Category:Wiki]]		[[Category:Wiki]]

			'''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]'''''


	== Common MTR Commands ==		== Common MTR Commands ==

Admin at 19:54, 12 January 2026

2026-01-12T19:54:50Z

← Older revision		Revision as of 19:54, 12 January 2026
Line 1:		Line 1:
	[[Category:Wiki]]		[[Category:Wiki]]

	~~== MTR Command in Linux ==~~

	MTR (My Traceroute) is a network diagnostic tool that combines the functionality of `ping` and `traceroute`. It is used to trace the route packets take to a destination, while providing real-time statistics on packet loss and latency. MTR continuously sends packets to each hop along the route to a destination and updates the display with live statistics, which makes it a more dynamic alternative to the traditional `traceroute`.

	== Common MTR Commands ==		== Common MTR Commands ==
Line 111:		Line 107:

	<nowiki>		<nowiki>
	mtr -c 5 example.com		mtr -c 5 example.com</nowiki>
	</nowiki>

	If packet loss is occurring at a specific hop, it suggests that either the router at that hop is experiencing issues or it is intentionally dropping ICMP packets.		If packet loss is occurring at a specific hop, it suggests that either the router at that hop is experiencing issues or it is intentionally dropping ICMP packets.
Line 122:		Line 117:

	<nowiki>		<nowiki>
	mtr example.com		mtr example.com</nowiki>
	</nowiki>

	If suspicious routes or IP addresses appear, there may be network manipulation or compromised routers.		If suspicious routes or IP addresses appear, there may be network manipulation or compromised routers.
Line 131:		Line 125:

	<nowiki>		<nowiki>
	mtr -T 443 example.com		mtr -T 443 example.com</nowiki>
	</nowiki>

	This sends TCP packets to port 443, which is less likely to be blocked by firewalls compared to ICMP packets.		This sends TCP packets to port 443, which is less likely to be blocked by firewalls compared to ICMP packets.
Line 142:		Line 135:

	<nowiki>		<nowiki>
	mtr -T 443 example.com		mtr -T 443 example.com</nowiki>
	</nowiki>

	By sending TCP packets, you can verify that your firewall allows legitimate traffic and blocks malicious attempts.		By sending TCP packets, you can verify that your firewall allows legitimate traffic and blocks malicious attempts.
Line 156:		Line 148:

	<nowiki>		<nowiki>
	mtr -T 443 example.com		mtr -T 443 example.com</nowiki>
	</nowiki>

	This may help complete the trace when ICMP is blocked.		This may help complete the trace when ICMP is blocked.
Line 170:		Line 161:

	<nowiki>		<nowiki>
	mtr -c 10 example.com		mtr -c 10 example.com</nowiki>
	</nowiki>

	This indicates that the issue is at hop 3 and may need further investigation.		This indicates that the issue is at hop 3 and may need further investigation.
Line 181:		Line 171:

	<nowiki>		<nowiki>
	mtr -n example.com		mtr -n example.com</nowiki>
	</nowiki>

	The issue might not lie with the destination, but with the router blocking ICMP traffic.		The issue might not lie with the destination, but with the router blocking ICMP traffic.

Admin: Created page with "Category:Wiki == MTR Command in Linux == MTR (My Traceroute) is a network diagnostic tool that combines the functionality of `ping` and `traceroute`. It is used to trace the route packets take to a destination, while providing real-time statistics on packet loss and latency. MTR continuously sends packets to each hop along the route to a destination and updates the display with live statistics, which makes it a more dynamic alternative to the traditional `tracerout..."

2026-01-12T19:54:07Z

Created page with "Category:Wiki == MTR Command in Linux == MTR (My Traceroute) is a network diagnostic tool that combines the functionality of `ping` and `traceroute`. It is used to trace the route packets take to a destination, while providing real-time statistics on packet loss and latency. MTR continuously sends packets to each hop along the route to a destination and updates the display with live statistics, which makes it a more dynamic alternative to the traditional `tracerout..."

New page

[[Category:Wiki]]

== MTR Command in Linux ==

MTR (My Traceroute) is a network diagnostic tool that combines the functionality of `ping` and `traceroute`. It is used to trace the route packets take to a destination, while providing real-time statistics on packet loss and latency. MTR continuously sends packets to each hop along the route to a destination and updates the display with live statistics, which makes it a more dynamic alternative to the traditional `traceroute`.

== Common MTR Commands ==

=== Basic Traceroute with MTR ===
To perform a simple traceroute to a host:

<nowiki>
mtr example.com</nowiki>

This command performs a traceroute to the destination `example.com`, showing each hop along the route and the round-trip time to each hop.

=== Displaying MTR with Numeric IPs ===
To prevent DNS resolution and show IP addresses instead of hostnames for the route, use the `-n` option:

<nowiki>
mtr -n example.com</nowiki>

This command is useful if you are troubleshooting network issues and do not want to wait for DNS lookups.

=== Show Detailed Output with Report Mode ===
To generate a summary report at the end of the MTR execution:

<nowiki>
mtr -r -c 10 example.com</nowiki>

This will run MTR, sending 10 packets to each hop, and then provide a report with statistics about packet loss, average latency, and other data.

=== Limiting the Number of Pings ===
To limit the number of packets sent to each hop, use the `-c` option followed by the desired count:

<nowiki>
mtr -c 5 example.com</nowiki>

This will limit the test to sending only 5 packets per hop.

=== Using MTR with TCP Packets ===
MTR by default uses ICMP Echo Request packets, but sometimes TCP packets are necessary to bypass ICMP restrictions on the network. To send TCP packets, use the `-T` option with a specified port number:

<nowiki>
mtr -T 80 example.com</nowiki>

This sends TCP packets to port 80, which is often open and might bypass firewalls that block ICMP.

=== Displaying MTR Output with Hostnames and IPs ===
To display both hostnames and IP addresses in the MTR output, use the `-b` option:

<nowiki>
mtr -b example.com</nowiki>

This command will show both the DNS-resolved hostnames and their associated IP addresses.

=== Adjusting the Time-to-Live (TTL) Value ===
The `-t` option allows you to specify the Time-to-Live (TTL) value for the packets sent by MTR. The TTL determines the maximum number of hops (routers) the packet will pass through before being discarded:

<nowiki>
mtr -t 30 example.com</nowiki>

This limits the traceroute to a maximum of 30 hops.

=== Setting the Interval Between Packets ===
The `-i` option sets the interval in seconds between each packet sent. The default interval is 1 second, but you can change it as needed:

<nowiki>
mtr -i 0.5 example.com</nowiki>

This command sets the interval to 0.5 seconds between packets.

=== Displaying a Continuous Live Update ===
To keep the output live and continuously updating, use the `-u` option:

<nowiki>
mtr -u example.com</nowiki>

This will show continuous updates of latency and packet loss in real time.

=== Setting a Maximum Hops Limit ===
The `-m` option allows you to set a maximum number of hops for the traceroute. This is useful if you want to limit the trace to a smaller part of the route:

<nowiki>
mtr -m 15 example.com</nowiki>

This limits the trace to a maximum of 15 hops.

=== Displaying MTR Output in a Report-Friendly Format ===
To generate a plain text report after MTR finishes running, use the `-r` option:

<nowiki>
mtr -r -c 10 example.com</nowiki>

This command will generate a report after sending 10 packets to each hop, summarizing the statistics.

=== Showing MTR in JSON Format ===
For easier integration with other tools or for advanced logging, MTR can output data in JSON format. Use the `--json` option:

<nowiki>
mtr --json example.com</nowiki>

This command outputs the MTR results in a structured JSON format, which can be processed by other applications.

== Security Concepts ==

=== Detecting Network Path Issues ===
MTR helps in identifying network path issues by showing where latency or packet loss is occurring. By analyzing each hop along the route, you can pinpoint the devices or network segments that are introducing delays or dropping packets.

Look for hops that show high latency or packet loss:

<nowiki>
mtr -c 5 example.com
</nowiki>

If packet loss is occurring at a specific hop, it suggests that either the router at that hop is experiencing issues or it is intentionally dropping ICMP packets.

=== Identifying Malicious Network Behavior ===
MTR can also be used to identify unusual routing paths, which may indicate a man-in-the-middle attack or unauthorized redirection of traffic. For example, if the trace to a known destination unexpectedly passes through an untrusted network, further investigation is warranted.

Look for unexpected or unauthorized IP addresses in the trace:

<nowiki>
mtr example.com
</nowiki>

If suspicious routes or IP addresses appear, there may be network manipulation or compromised routers.

=== Testing Network Security Controls ===
Some firewalls may block ICMP packets or restrict MTR. Using TCP packets instead of ICMP can bypass such restrictions:

<nowiki>
mtr -T 443 example.com
</nowiki>

This sends TCP packets to port 443, which is less likely to be blocked by firewalls compared to ICMP packets.

=== Firewall and MTR ===
MTR is an effective tool for ensuring that firewalls are properly configured. By analyzing the open ports and network paths, MTR can help identify any misconfigurations in firewalls or network security devices.

Use MTR to ensure that no unauthorized ports or paths are accessible:

<nowiki>
mtr -T 443 example.com
</nowiki>

By sending TCP packets, you can verify that your firewall allows legitimate traffic and blocks malicious attempts.

== Troubleshooting ==

=== MTR Does Not Complete or Times Out ===
If MTR times out or fails to complete, it may indicate that one or more routers in the network path are blocking ICMP traffic. To troubleshoot:

1. Check if intermediate routers block ICMP with `mtr -n`.
2. Use TCP-based MTR to bypass firewalls that block ICMP:

<nowiki>
mtr -T 443 example.com
</nowiki>

This may help complete the trace when ICMP is blocked.

=== High Latency or Packet Loss Detected ===
When MTR shows high latency or packet loss, it suggests network congestion or issues at specific hops. To isolate the issue:

1. Identify the hop with the highest latency or packet loss.
2. Contact the network administrator for that hop or check the device/router at that hop.

For example, if hop 3 shows high latency:

<nowiki>
mtr -c 10 example.com
</nowiki>

This indicates that the issue is at hop 3 and may need further investigation.

=== MTR Output Shows "Unreachable" Hops ===
If the MTR output shows "unreachable" or timeouts at certain hops, it may indicate that those routers are configured not to respond to ICMP requests. These routers are likely still forwarding traffic, but not responding to traceroute queries.

You can verify this by checking for other responses along the path:

<nowiki>
mtr -n example.com
</nowiki>

The issue might not lie with the destination, but with the router blocking ICMP traffic.

== Useful Links ==
* https://linux.die.net/man/8/mtr
* https://www.man7.org/linux/man-pages/man8/mtr.8.html
* https://manned.org/mtr
* https://www.freebsd.org/cgi/man.cgi?query=mtr
* https://opensource.com/article/18/7/how-use-mtr-debug-network
* https://www.networkworld.com/article/2950565/why-you-should-be-using-mtr-over-traceroute.html

MTR - Base Documentation - Revision history

Admin: Text replacement - "Category:Wiki" to "Category:Wiki '''''[https://it-arts.net/index.php/Category:Wiki Return to Wiki Index]''''' "

Admin at 19:54, 12 January 2026