312-50V9 · Question #145
If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which o
The correct answer is A. Hping. Hping is a command-line packet crafting tool that can send TCP-based probes, making it useful for host discovery when ICMP is blocked.
Question
If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which other option could the tester use to get a response from a host using TCP?
Options
- AHping
- BTraceroute
- CTCP ping
- DBroadcast ping
How the community answered
(33 responses)- A73% (24)
- B18% (6)
- C3% (1)
- D6% (2)
Why each option
Hping is a command-line packet crafting tool that can send TCP-based probes, making it useful for host discovery when ICMP is blocked.
Hping is a versatile packet generator that supports TCP, UDP, and ICMP protocols, allowing a tester to send TCP SYN or ACK packets to a target host to elicit a response when ICMP is filtered or disabled. By crafting TCP packets to open ports, hping can confirm host availability even in environments where ping is blocked by firewall rules or host configuration.
Traceroute primarily uses ICMP (or UDP on Linux) to map network paths and would face the same blocking issue as ping when ICMP is disabled.
TCP ping is a general concept or feature found in some tools, not a standalone tool the tester would invoke - hping is the specific tool that implements this capability.
Broadcast ping sends ICMP echo requests to a broadcast address and still relies on ICMP, which the scenario states may be disabled.
Concept tested: Host discovery using TCP probes with hping when ICMP is blocked
Source: http://www.hping.org/documentation.php
Topics
Community Discussion
No community discussion yet for this question.