Hping traceroute works in the usual way.
The ttl field is set to 1 , and the packet is sent . The packet dies at hop 1. A reply arrives with source addr set to hop1 to conveys that the packet is dead.
The ttl field is set to 2 , the packet moves to hop1 and then to hop2 and dies, and reply from hop2 returns. We now get the address of hop2
Thus by incrementing the ttl until the source addr of the packet returned equals the destination address intended
we arrive at the route traversed .
-Nalini V, RV College of Engineering , Bangalore