What can traceroute show about the path to an IP address?¶

Traceroute is a present-time diagnostic test that asks responding network hops to reveal themselves as traffic approaches a destination.

What it can show¶

It may indicate:

• responding routers or network interfaces;
• approximate round-trip times;
• a change of provider or route; and
• infrastructure that appears between the tester and destination.

Why it is not a complete map¶

Routers may ignore diagnostic packets, return another interface or treat them differently from application traffic. A timeout does not prove traffic stopped. Load balancing can produce different paths, and the return route may differ from the forward route.

Router names and geolocation labels can be administrative or outdated. A current test also cannot reconstruct the route used by an earlier event because internet routing changes.

Use traceroute as infrastructure intelligence. It does not establish a precise physical journey, original device, user or person.