strange ping and traceroute results

[shimi]

On 20 Nov 2016 07:02, "Shlomo Solomon" <shlomo.solomon at gmail.com> wrote:
>
> When I try ping or traceroute to www.google.com, I get strange results.
> Both utilities "think" that www.google.com is at 213.57.*.*, but those
> addresses belong to my Internet provider - Hotnet.
>
> What am I missing?
>
> [solomon at shlomo1]$ ping www.google.com
> PING www.google.com (213.57.23.29) 56(84) bytes of data.
> 64 bytes from 213.57.23.29: icmp_seq=1 ttl=59 time=17.1 ms
> 64 bytes from 213.57.23.29: icmp_seq=2 ttl=59 time=16.8 ms
> 64 bytes from 213.57.23.29: icmp_seq=3 ttl=59 time=17.1 ms
>
> [solomon at shlomo1]$ sudo traceroute www.google.com
> traceroute to www.google.com (213.57.24.55), 30 hops max, 60 byte packets
> 1  router-1.solomon (10.0.0.138)  1.010 ms  1.007 ms  1.006 ms
> 2  core-213-57-3-7.ptr.hotnet.net.il (213.57.3.7)  15.379 ms  15.741 ms
16.551 ms
> 3  ae7.101.hfa.mx-lns.con.hotnet.net.il (213.57.3.221) 36.177 ms  36.182
ms  36.178 ms
> 4  core-213-57-3-217.ptr.hotnet.net.il (213.57.3.217)  17.736 ms  17.736
ms  17.733 ms
> 5  * * *
> 6  * * *
> 7  * * *
> 8  * * *

I believe it's called a CDN and/or local compute clusters and the purpose
of it is to give you a better user experience, which is a Good Thing (TM).

There are other similar POPs I saw at least in BezeqInt.

The question really is:

Why do you think it's a problem and are trying to avoid it?

If your reply includes the letters M-I-T-M, please consider that without
installing a fake CA cert on your host, MITMing an SSL/TLS connection WILL
cause a connection set up error from your browser.

HTH,

-- Shimi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.cs.huji.ac.il/pipermail/linux-il/attachments/20161120/e48435ef/attachment-0001.html>