Traceroute
About the Traceroute
Traceroute maps the network path that packets take from the source to a destination host, listing each intermediate router (hop) along the way and the round-trip time to reach it. It reveals how many hops separate you from the target and where in the journey latency spikes or packets get dropped, making it the go-to tool for diagnosing where a connection slows down or breaks. Each line in the output represents one hop closer to the destination.
The classic technique works by sending packets with incrementally increasing TTL (Time To Live) values; each router that decrements the TTL to zero returns an ICMP "time exceeded" message, revealing its address and timing. By stepping the TTL from 1 upward, traceroute discovers the routers one by one until the destination is reached. Implementations may use ICMP, UDP, or TCP probes depending on what intermediate networks permit.
Use cases include diagnosing routing problems, identifying which network segment introduces latency, confirming that traffic takes an expected geographic path, and gathering evidence when reporting an issue to an ISP or hosting provider. It complements a Ping Test, which tells you the end-to-end latency, by breaking that latency down hop by hop, and works alongside DNS and Hosting Provider tools to understand the infrastructure at the far end.
Interpret the output carefully: asterisks or timeouts at a hop usually mean that router declines to reply to probes, not that the path is broken, since traffic often passes through silent hops just fine. Latency that rises and then stabilizes across later hops is normal, while a sustained jump that persists to the destination flags the likely bottleneck. Because the internet uses asymmetric routing, the return path may differ from the outbound path you see.
Frequently asked questions
- What does an asterisk or timeout at a hop mean?
- It usually means that particular router is configured not to reply to traceroute probes, or it rate-limits ICMP. Traffic typically still passes through such silent hops, so a few asterisks do not indicate a broken path.
- How does traceroute discover each router in the path?
- It sends packets with increasing TTL values. Each router that decrements the TTL to zero returns an ICMP time-exceeded message, exposing its address. Stepping the TTL from one upward reveals the hops one by one until the destination responds.
- Why is the last hop's latency sometimes lower than an earlier hop?
- Intermediate routers may deprioritize replying to probes, inflating their reported time, while the destination answers promptly. Only a sustained latency increase that persists to the end reliably indicates a bottleneck.
- How is traceroute different from a ping test?
- A ping test measures total round-trip latency to the destination, while traceroute breaks that journey into individual hops so you can see exactly where delays or losses occur along the path.