Which of the following commands manipulates the TTL (Time to Live) field in the IP protocol in order to get ICMP responses from gateways along the path to a host?

`dig` is a DNS lookup utility.

`host` is a simple utility for performing DNS lookups.

`ping` sends ICMP echo requests to test connectivity to a single host and does not systematically vary TTL to map a path.

`tcpdump` is a packet analyzer that captures and displays network traffic, not a tool for path discovery.

The `traceroute` command works by sending packets with incrementally increasing TTL values. Each router that receives a packet with a TTL of 1 (or 0 after decrementing) will drop it and send an ICMP 'Time Exceeded' message back to the source, allowing `traceroute` to identify each hop along the path.