nerdexam
GIAC

GCIA · Question #91

Which of the following tools is used to detect round-robin-load-balancing?

The correct answer is D. tcptraceroute. This question asks which tool can reveal round-robin load balancing by showing different destination IPs across repeated traces using TCP.

Packet Analysis with Wireshark & Command Line Tools

Question

Which of the following tools is used to detect round-robin-load-balancing?

Options

  • Atraceroute
  • Btcptrace
  • CTCP SYN scanning
  • Dtcptraceroute

How the community answered

(29 responses)
  • A
    7% (2)
  • B
    17% (5)
  • C
    3% (1)
  • D
    72% (21)

Why each option

This question asks which tool can reveal round-robin load balancing by showing different destination IPs across repeated traces using TCP.

Atraceroute

traceroute uses ICMP echo requests or UDP and does not establish TCP connections, making it less effective at revealing application-layer load balancing decisions.

Btcptrace

tcptrace is a post-capture analysis tool that parses existing tcpdump packet capture files rather than actively probing a network path.

CTCP SYN scanning

TCP SYN scanning is a port discovery technique used in network reconnaissance and does not trace routing paths or expose load balancer rotation.

DtcptracerouteCorrect

tcptraceroute uses TCP SYN packets instead of ICMP or UDP to trace the route to a destination, which allows it to bypass firewalls that block ICMP. Because it establishes actual TCP connections, repeated runs can expose round-robin DNS or load balancer rotation by returning different hop endpoints or destination IPs. This makes it suitable for detecting that multiple servers are serving the same hostname in rotation.

Concept tested: Detecting round-robin load balancing with tcptraceroute

Source: https://linux.die.net/man/1/tcptraceroute

Topics

#tcptraceroute#load balancing detection#round-robin DNS#network reconnaissance

Community Discussion

No community discussion yet for this question.

Full GCIA Practice