Can we run traceroute from sourcefire defense center

[tausif.shaikh]

Hoe do we run a trace from the DC to the sensor and viceversa.

I am having DC 3500 and sensor 3d1000 and 7000 and 8000 series.

[yogdhanu]

Hi

You can do that by logging to CLI.

on DC

>sudo traceroute IP-address

on sensor

>expert

>sudo traceroute IP-address

Same is true for ping as well.

Rate if it helps.

Yogesh

[tausif.shaikh]

Thanks yogesh.

I tried that already but got command not found error.

I tried via admin as well as root login.

Any idea why I am not able to do so.

Ping works fine the same way.

Regards,

Tausif

[yogdhanu]

Hi

Have you tried getting into root mode and then try it.

>sudo su

enter password

>traceroute 4.2.2.2 , it should work.

If its still not working , what's the core that you are using and can you add a screenshot of the error

[tausif.shaikh]

HI

I have tried via root mode also.

Version of Sourcefire

Sourcefire Linux OS v5.3.0 (build 52)
Sourcefire 3D Sensor 1000 v5.3.0 (build 571)

GNU bash, version 3.2.33(1)-release (i686-pc-linux-gnu)

Below is what I tried and the error

admin@Sourcefire3D:~$ sudo traceroute X.X.X.X
Password:
sudo: traceroute: command not found
admin@Sourcefire3D:~$ sudo -i
root@Sourcefire3D:~# traceroute X.X.X.X
-sh: traceroute: command not found
root@Sourcefire3D:~# sudo traceroute X.X.X.X
sudo: traceroute: command not found

[yogdhanu]

I am not sure about 5.3 OS. I have tested it in 5.4 and 6.0 and on both of those OS version traceroute does work.

[Aastha Bhardwaj · Accepted solution]

Hi ,

Traceroute is not available on 5.3. It is available from 5.4.

Regards,

Aastha Bhardwaj

Rate if that helps!!!