Someone please help me with the traceroute using jpcap

[rosy Jovita]

Hi,

I was trying to create a traceroute program using jpcap.
There was an example prrovided by the jpcap developer but it doesn't works.
Anyone ever try this before?perhaps i missed something. cause when i run the program,
it gave me this output only: Usage: java Traceroute <device index (e.g., 0, 1..)> <target host address>

this is the example:

  import java.net.Inet4Address;
import java.net.InetAddress;
import java.net.URL;
import java.util.Arrays;

import jpcap.JpcapCaptor;
import jpcap.JpcapSender;
import jpcap.NetworkInterface;
import jpcap.NetworkInterfaceAddress;
import jpcap.packet.EthernetPacket;
import jpcap.packet.ICMPPacket;
import jpcap.packet.IPPacket;
import jpcap.packet.Packet;

public class Traceroute {
	public static void main(String[] args) throws Exception{
		if(args.length<2){
			System.out.println("Usage: java Traceroute <device index (e.g., 0, 1..)> <target host address>");
			System.exit(0);
		}
		
		//initialize Jpcap
		NetworkInterface device=JpcapCaptor.getDeviceList()[Integer.parseInt(args[0])];
		JpcapCaptor captor=JpcapCaptor.openDevice(device,2000,false,5000);
		InetAddress thisIP=null;
		for(NetworkInterfaceAddress addr:device.addresses)
			if(addr.address instanceof Inet4Address){
				thisIP=addr.address;
				break;
			}
		
		//obtain MAC address of the default gateway
		InetAddress pingAddr=InetAddress.getByName("www.google.com");
		captor.setFilter("tcp and dst host "+pingAddr.getHostAddress(),true);
		byte[] gwmac=null;
		while(true){
			new URL("http://www.microsoft.com").openStream().close();
			Packet ping=captor.getPacket();
			if(ping==null){
				System.out.println("cannot obtain MAC address of default gateway.");
				System.exit(-1);
			}else if(Arrays.equals(((EthernetPacket)ping.datalink).dst_mac,device.mac_address))
					continue;
			gwmac=((EthernetPacket)ping.datalink).dst_mac;
			break;
		}
		
		//create ICMP packet
		ICMPPacket icmp=new ICMPPacket();
		icmp.type=ICMPPacket.ICMP_ECHO;
		icmp.seq=100;
		icmp.id=0;
		icmp.setIPv4Parameter(0,false,false,false,0,false,false,false,0,0,0,IPPacket.IPPROTO_ICMP,
				thisIP,InetAddress.getByName(args[1]));
		icmp.data="data".getBytes();
		
		EthernetPacket ether=new EthernetPacket();
		ether.frametype=EthernetPacket.ETHERTYPE_IP;
		ether.src_mac=device.mac_address;
		ether.dst_mac=gwmac;
		icmp.datalink=ether;
		
		captor.setFilter("icmp and dst host "+thisIP.getHostAddress(),true);
		JpcapSender sender=captor.getJpcapSenderInstance();
		//JpcapSender sender=JpcapSender.openDevice(device);
		sender.sendPacket(icmp);
		while(true){
			ICMPPacket p=(ICMPPacket) captor.getPacket();
			//System.out.println("received "+p);
			if(p==null){
				System.out.println("Timeout");
			}else if(p.type==ICMPPacket.ICMP_TIMXCEED){
				p.src_ip.getHostName();
				System.out.println(icmp.hop_limit+": "+p.src_ip);
				icmp.hop_limit++;
			}else if(p.type==ICMPPacket.ICMP_UNREACH){
				p.src_ip.getHostName();
				System.out.println(icmp.hop_limit+": "+p.src_ip);
				System.exit(0);
			}else if(p.type==ICMPPacket.ICMP_ECHOREPLY){
				p.src_ip.getHostName();
				System.out.println(icmp.hop_limit+": "+p.src_ip);
				System.exit(0);
			}else continue;
			sender.sendPacket(icmp);
		 }
		
	}
}
  

Anyone successfully use this example?
can you please help me?
Thanks..

[Ulf Dittmer]

If you look at the first few lines of the main method, you'll see that this message is printed if you don't supply two command line parameters. It's trying to tell you what those parameters should be. So: what, exactly, did you enter on the command line?

[rosy Jovita]

I don't enter the two command lines.
To be honest, I don't know where to enter that two command lines.
Can you please help?

Thanks.

[Ulf Dittmer]

The target host address is the IP address of the machine to which you want to find the route.

The device index is a bit trickier, there's some explanation at http://netresearch.ics.uci.edu/kfujii/jpcap/doc/tutorial/, especially the section on "Obtain the list of network interfaces".

[rosy Jovita]

Thanks for your explanation, I got it.
I'll give it a try

[rosy Jovita]

hi Dittmer,

I've tried that but it gave me exception error.

Exception in thread "main" java.lang.NoClassDefFoundError: Traceroute/java

any idea?

[Ulf Dittmer]

What, exactly, did you enter on the command line? It should be something like "java Traceroute 0 87.248.122.122".

[Rob Spoor]

rosy Jovita wrote:hi Dittmer,

I've tried that but it gave me exception error.

Exception in thread "main" java.lang.NoClassDefFoundError: Traceroute/java

any idea?

Ulf is right. You tried to execute Traceroute.java, but you mustn't type in the source file but the class name.

[rosy Jovita]

I have tried to run this program again using this : java Traceroute 0 10.87.224.78
Still,it gave me exception error.
please someone help me with this..
I have tried many times but it doesn't work.

[Ulf Dittmer]

it gave me exception error.

We do not have access to your screen, so we don't know what error that is; that makes it exceedingly difficult to help.

[Tim McGuire]

rosy Jovita wrote:I have tried to run this program again using this : java Traceroute 0 10.87.224.78
Still,it gave me exception error.
please someone help me with this..
I have tried many times but it doesn't work.

for me it gave arrayIndexOutofBoundsException

because the line

NetworkInterface device=JpcapCaptor.getDeviceList()[Integer.parseInt(args[0])];

maybe for you as well as me, device list is empty because of privilege issue (java code run by ordinary user cannot get list of devices)

so I add this to code:

NetworkInterface[] devices = JpcapCaptor.getDeviceList();

if(devices.length == 0){

			System.out.println("Device list is empty.  Check if you have admin privileges");
			System.exit(0);
		} else {
			System.out.println("divices: " + devices.length);
		}

Once I ran as administrator, it worked for me.

[rosy Jovita]

hi,

okay, first of all i'm having problem with ping.
I'm not sure if this problem affected the Traceroute.
I tried to ping www.google.com to get the ip address but the result turned to be
like this:

C:\Documents and Settings\ros>ping www.google.com
'ping' is not recognized as an internal or external command,
operable program or batch file.

And then, I tried the traceroute again, this is what i get:

C:\Documents and Settings\ros>java Traceroute 0 10.201.54.87
Exception in thread "main" java.lang.NoClassDefFoundError: Traceroute

Does the ping problem affect the traceroute?If yes, then i think it is my pc problem.
For your information, i am using my personal notebook and i am the admin.

Thanks..again,i'm looking forward for replies.

[Ulf Dittmer]

While ping uses similar mechanism underneath, the fact that it doesn't run as an executable doesn't impact whether or not other similar tools can run. Does your installation actually have a version of ping installed? Check the PATH for "ping.exe", and consult the Windows documentation about it.

Is the file Traceroute.class in the C:\Documents and Settings\ros directory? If so, you may have a CLASSPATH setting that doesn't include the current directory ("."). I generally advise not to use CLASSPATh at all - it's more trouble than it's worth. In that case, you can run the code via "java -classpath . Traceroute 0 10.201.54.87".

[rosy Jovita]

hi ulf,

Yes, The Traceroute.class is in the C:\Documents and Settings\ros directory.
Okay, let me give it a try. Thanks Ulf.

[rosy Jovita]

Hi tim and ulf,

I've fixed the problem, i didn't include the jpcap.dll in the jre library.
But now i'm having problem with getting the MAC address of the default gateway.

run the code and got this output:


C:\Documents and Settings\ros\Desktop>java Traceroute 0 216.239.61.104
devices: 3
cannot obtain MAC address of default gateway.

Anything else i missed out?
Thanks for help

[Tim McGuire]

rosy Jovita wrote:Hi tim and ulf,

I've fixed the problem, i didn't include the jpcap.dll in the jre library.
But now i'm having problem with getting the MAC address of the default gateway.

run the code and got this output:


C:\Documents and Settings\ros\Desktop>java Traceroute 0 216.239.61.104
devices: 3
cannot obtain MAC address of default gateway.

Anything else i missed out?
Thanks for help

I had the same problem until I listed out the devices.
for me, the first device in the list (which you get by using "0") didn't work. Try java Traceroute 1 216.239.61.104

[rosy Jovita]

Tim,

will you mind to post the sample output that you get?
Thanks.

[Tim McGuire]

rosy Jovita wrote:Tim,

will you mind to post the sample output that you get?
Thanks.

here is the result at work, including the listing of devices (this router is not reporting on what happens beyond and so my traceroute only shows the steps from my PC to the router).
I'll post what I get from my home network later if you'd like
C:\java>java Traceroute 1 google.com
\Device\NPF_GenericDialupAdapter : Adapter for generic dialup and VPN capture
\Device\NPF_{0D558F01-DFD8-4270-89D9-3676F7620BD7} : Intel(R) 82567LM Gigabit Network Connection
\Device\NPF_{1BAA617E-8926-4C98-B0EE-8F3794197CF6} : Juniper Network Connect Virtual Adapter
\Device\NPF_{4BBD00CF-08F5-427F-BEC5-5A1DD41CE5C0} : VMware Virtual Ethernet Adapter
\Device\NPF_{63B2F25F-D0EE-4F8F-BFD3-3C7B732059F7} : VMware Virtual Ethernet Adapter
0: 10.20.252.162/10.20.252.162
1: 10.20.252.162/10.20.252.162

compare this to the tracert.exe command from DOS. That gives me 16 hops from me to google.com
I don't yet know how to fix traceroute.java to show the 16 hops.

[Tim McGuire]

I added the following

System.out.println(" about to send " + icmp.toString() + " with hoplimit of " + icmp.hop_limit);

right before the first

sender.sendPacket(icmp);

and I see now that this program we are using, Traceroute.java sends this icmp packet out with a hop_limit of ZERO. This value is decreased by one every time it goes through a router and if the
router sees zero, it throws the packet away So, we can't expect it to go anywhere. It is supposed to be increased by 1 in the if... else tree, but this branch of code is never reached.

So, this program is flawed in so many ways.

[Tim McGuire]

So, I ran it again, printing out the TYPE of the returning packet (p)
here is a chart of all the constant values

http://netresearch.ics.uci.edu/kfujii/jpcap/doc/javadoc/constant-values.html
and I see that while it is finding the ICMP_TIMXCEED branch of the code on the first hop, and correctly adding 1 to the hop_limit,

the next time, it recieves a 3, which by the chart is ICMP_REDIRECT_TOSHOST and is not handled by the if...then...else

while(true){
			ICMPPacket p=(ICMPPacket) captor.getPacket();
			System.out.println("received "+p.type);
			if(p==null){
				System.out.println("Timeout");
			}else if(p.type==ICMPPacket.ICMP_TIMXCEED){
				p.src_ip.getHostName();
				System.out.println(icmp.hop_limit + " : " +p.src_ip);
				icmp.hop_limit++;
			}else if(p.type==ICMPPacket.ICMP_UNREACH){
				p.src_ip.getHostName();
				System.out.println(icmp.hop_limit+" : "+p.src_ip);
				System.exit(0);
			}else if(p.type==ICMPPacket.ICMP_ECHOREPLY){
				p.src_ip.getHostName();
				System.out.println(" icmp hop limit " + icmp.hop_limit+" : "+p.src_ip);
				System.exit(0);
			}else continue;

			System.out.println("in while loop, about to send " + icmp.toString() + " with hoplimit of " + icmp.hop_limit);
			sender.sendPacket(icmp);

[Tim McGuire]

so, I added

} else if (p.type==ICMPPacket.ICMP_REDIRECT_TOSHOST){
				p.src_ip.getHostName();
				// don't want to print this redirect.
				icmp.hop_limit++;

and now I'm getting something that resembles my tracert output.

[rosy Jovita]

Tim,

Thanks a lot for the sample output and for the help.
Thank you very much. I've compare with mine.
I get the same output, only that i don't display each of the network device.
This is mine:

C:\Documents and Settings\ros\Desktop>java Traceroute 1 google.com
devices: 3
0: 10.48.224.1/10.48.224.1
1: 10.48.224.1/10.48.224.1   

Yeah, i was thinking of that too. I'll try it soon.
Thanks for your help, thank you very much

[rosy Jovita]

here is the result at work, including the listing of devices (this router is not reporting on what happens beyond and so my traceroute only shows the steps from my PC to the router).
I'll post what I get from my home network later if you'd like



Thanks Tim, i'll wait for the sample output from your home network.

[rosy Jovita]

here is the result at work, including the listing of devices (this router is not reporting on what happens beyond and so my traceroute only shows the steps from my PC to the router).
I'll post what I get from my home network later if you'd like

Thanks Tim, i'll wait for the sample output from your home network.

[rosy Jovita]

Hi all,

anybody can tell me what's the function of these two?

icmp.seq=100;
icmp.id=0;

i have no idea on how does it works, sorry..i'm still new to java networking.
thanks for help.

[Ulf Dittmer]

Wikipedia knows a bit about this (Internet_Control_Message_Protocol), but if you're serious about this kind of low level network stuff, you should work through a thorough introduction like volume 1 of Douglas Comer's TCP/IP book.

[Tim McGuire]

rosy Jovita wrote:Hi all,

anybody can tell me what's the function of these two?

icmp.seq=100;
icmp.id=0;

i have no idea on how does it works, sorry..i'm still new to java networking.
thanks for help.

You can look these up (icmp), but these are not important to your underlying problem that the Traceroute program does not handle all the types you are receiving.
have you added code to Traceroute.java to handle packets of type ICMP_REDIRECT_TOSHOST ?

[rosy Jovita]

yeah, i have added that code but the output are still more or less the same like the sample that i
sent to you..

[Tim McGuire]

ok. if you now print out p.type by adding

System.out.println("type received "+p.type);

after

			ICMPPacket p=(ICMPPacket) captor.getPacket();

what numbers then come in your output? I expect you will need to handle more types.

[rosy Jovita]

tim,

i got 11 and 3
but what is that for?
i'm getting more and more confuse with this.

[Ulf Dittmer]

rosy Jovita wrote:i got 11 and 3
but what is that for?

Go to the javadocs for the ICMPPacket class, find a link called "Constant Field Values" and click on it. That will take you to a table that lists those values (note that there's some duplication of values in the table).

Note that 3 is ICMP_REDIRECT_TOSHOST, which Tim asked you about earlier. 11 might be ICMP_UNREACH_TOSNET.

To understand these, and to know how to handle them, a thorough reading of an ICMP tutorial is probably required.

[rosy Jovita]

ulf,

thanks for that, have just realize of that. 11 is the Time exceed and 3 is icmp unreach port.
now i understand what is really going on.
The packet does not reach the destination.
Are you having the same problem too Tim?

[Tim McGuire]

rosy Jovita wrote:ulf,

thanks for that, have just realize of that. 11 is the Time exceed and 3 is icmp unreach port.
now i understand what is really going on.
The packet does not reach the destination.
Are you having the same problem too Tim?

No, once I handled the 3, my Traceroute worked. Post your current code here and I'll compare it to mine.

[rosy Jovita]

Tim,

this is what i get:

0: \Device\NPF_GenericDialupAdapter(Adapter for generic dialup and VPN capture)
datalink: EN10MB(Ethernet)
1: \Device\NPF_{6BDC6AC4-C6EF-4273-89B3-1492C5960423}(Broadcom 802.11g Network Adapter (Microsoft's Packet Scheduler) )
datalink: EN10MB(Ethernet)
2: \Device\NPF_{94F2D365-F539-4834-AC2E-1F5A2BEF0F54}(Realtek RTL8139 Family Fast Ethernet Adapter (Microsoft's Packet Scheduler) )
datalink: EN10MB(Ethernet)
type received 11
0: 10.48.224.1/10.48.224.1
type received 3
1: 10.255.4.9/10.255.4.9

[Tim McGuire]

I meant, post the code to your current Traceroute.java

[rosy Jovita]

hi tim, sorry for the late reply.

this is my current code:

  if(noOfdevices.length == 0){

               System.out.println("Device list is empty.  Please check if you have admin privileges");
               System.exit(0);

            } else {
               System.out.println("List of network device in this computer:");
               System.out.println();
               for(int i = 0; i< noOfdevices.length; i++){
               System.out.println(i+ ": " + noOfdevices[i].name + "(" +noOfdevices[i].description+")");
               System.out.println("datalink: " + noOfdevices[i].datalink_name + "(" +noOfdevices[i].datalink_description+")");
                }
            }
                //open an interface using openDevice(Networkinterface, int snaplen, booelan promics, int to_ms)
		JpcapCaptor captor=JpcapCaptor.openDevice(device,3000,false,1000);
		InetAddress thisIP=null;
		for(NetworkInterfaceAddress addr:device.addresses)
			if(addr.address instanceof Inet4Address){
				thisIP=addr.address; //get the ip address
				break;
			}

		//obtain MAC address of the default gateway

                byte[] gwmac=null;
                try{
                    InetAddress pingAddr=InetAddress.getByName("www.google.com");
                    captor.setFilter("tcp and dst host "+pingAddr.getHostAddress(),true);
                }
                catch (UnknownHostException ex){
                        System.out.println("You are offline, please check your network connection");
                        System.exit(0);
                }

		while(true){
			new URL("http://www.google.com").openStream().close();
			Packet ping=captor.getPacket();
			if(ping==null){
				System.out.println("cannot obtain MAC address of default gateway.");
				System.exit(-1);
			}else if(Arrays.equals(((EthernetPacket)ping.datalink).dst_mac,device.mac_address))
					continue;
			gwmac=((EthernetPacket)ping.datalink).dst_mac;
			break;
                    }


		//creating ICMP packet
		ICMPPacket icmp=new ICMPPacket();
		icmp.type=ICMPPacket.ICMP_ECHO;
		icmp.seq=120;
		icmp.id=0;
                //specify ipv4 header parameter
		icmp.setIPv4Parameter(0,false,false,false,0,false,false,false,0,0,0,IPPacket.IPPROTO_ICMP,
				thisIP,InetAddress.getByName(hostName));
		icmp.data="data".getBytes();

		EthernetPacket etherPckt=new EthernetPacket(); //create ethernet packet
		etherPckt.frametype=EthernetPacket.ETHERTYPE_IP;
		etherPckt.src_mac=device.mac_address; //set source and destination mac address
		etherPckt.dst_mac=gwmac;              //
		icmp.datalink=etherPckt;

		captor.setFilter("icmp and dst host "+thisIP.getHostAddress(),true);
		JpcapSender sender=captor.getJpcapSenderInstance();
		

		sender.sendPacket(icmp);
		while(true){
			ICMPPacket icmpPckt=(ICMPPacket) captor.getPacket();
			//System.out.println("type received "+icmpPckt.type);
			if(icmpPckt==null){
				System.out.println("Timeout");
			}else if(icmpPckt.type==ICMPPacket.ICMP_TIMXCEED){
				icmpPckt.src_ip.getHostName();
				System.out.println(icmp.hop_limit+": "+icmpPckt.src_ip);
				icmp.hop_limit++;
			}else if(icmpPckt.type==ICMPPacket.ICMP_UNREACH){
				icmpPckt.src_ip.getHostName();
				System.out.println(icmp.hop_limit+": "+icmpPckt.src_ip);
				System.exit(0);
                       
			}else if(icmpPckt.type==ICMPPacket.ICMP_ECHOREPLY){
				icmpPckt.src_ip.getHostName();
				System.out.println(icmp.hop_limit+": "+icmpPckt.src_ip);
				System.exit(0);
			}else if (icmpPckt.type==ICMPPacket.ICMP_REDIRECT_TOSHOST){
                                icmpPckt.src_ip.getHostName();
                                icmp.hop_limit++;
                        }else if(icmpPckt.type == ICMPPacket.ICMP_UNREACH_PORT){
                               //...
                        
                        }else continue;                        
                                sender.sendPacket(icmp);


                     
                           }
  

[rosy Jovita]

Hi Tim,

I get it works on ubuntu, it shows me number of hops and the ip address.
But it doesn't works on windows, I think so because each time i run it just showed two hops only.
but it's okay, I'll work hard for that.
and, do you think that it's possible to display the round trip times too?
Thanks Tim for your help, thank you very much

[rosy Jovita]

Hi Tim,

I've tried again on my friend's computer.
He's the admin of that pc but still i got arrayIndexOutOfBoundException.
Do you have any idea what is going on?

[Ulf Dittmer]

In which code are you getting the exception? What is the array index in question? How long is the array in question?

[Tim McGuire]

rosy Jovita wrote:Hi Tim,

I've tried again on my friend's computer.
He's the admin of that pc but still i got arrayIndexOutOfBoundException.
Do you have any idea what is going on?

So, he might have admin access, but maybe there is only one device, in which case the command Traceroute 1 216.239.61.104 would get an array index out of bound.

so, try Traceroute 0 216.239.61.104

that is all I can think of.