This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I captured network traffic to a certain IP address, (src: my IP, dst: xxx.xxx.xxx.xxx - dragon's IP address) I believe this dragon's IP address is belonging to VPN. I want to know if I can get the original IP address. If it's not belonging to VPN, I want to get the travel path of this packet. Thank you,

asked 17 Apr '15, 02:44

Chris%20Lin's gravatar image

Chris Lin
6113
accept rate: 0%


For your last question, one method is a simple traceroute. For example "tracert xxx.xxx.xxx.xxx" in Windows will attempt to discover the IP hops between your computer and that destination.

For the VPN quesiton, if they are connecting to a proxy and you're looking at the proxy IP address, there's nothing that would inherently allow you to see the actual source. Basically you'd need to have access to that proxy to see what is talking to it.

permanent link

answered 18 Apr '15, 09:16

Quadratic's gravatar image

Quadratic
1.9k6928
accept rate: 13%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×36
×7
×4

question asked: 17 Apr '15, 02:44

question was seen: 3,086 times

last updated: 18 Apr '15, 09:16

p​o​w​e​r​e​d by O​S​Q​A