intrace
open-sourceThe section your link pointed to isn't on intrace's page any more, so we've brought you to the top.
Enumeration of IP hops using existing TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. connections - robertswiecki/intrace
Summary
intrace is an open-source command-line traceroute utility that enumerates IP hops by piggybacking on existing TCP connections rather than sending its own probe packets, which lets it trace paths through firewalls that would otherwise block conventional traceroute. It runs from the terminal on Linux, watching a connection you initiate locally or one established remotely, and printing each hop's response as ICMP TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit.-exceeded or no-response. This fits network reconnaissance and firewall-bypass work, aimed at penetration testers and network engineers mapping paths rather than at SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. analysts monitoring them. It sits alongside standard traceroute tools as a technique for evading filtering rather than a replacement for path discovery generally. Development dates back to 2008 with a small set of contributors, and there have been no commits in the past year, so treat it as a stable but unmaintained utility.
Enumeration of IP hops using existing TCP connections - robertswiecki/intrace
How intrace helps
Which hops between me and a host are hidden from a normal traceroute because a firewall drops UDP or ICMP probes?
rides an already-open TCP connection instead of sending its own probe packets, so it prints ICMP TTL-exceeded or no-response for each hop along a path a filter would otherwise block
Can I map the path to a host without opening a new outbound connection myself?
watches a TCP connection someone else established to the local machine and enumerates the hops from the returned TTL-exceeded messages just as it would for one initiated locally
Where along the route does a filtering device sit relative to the destination?
numbers each hop from the sequence and acknowledgment numbers of the live connection and marks the ones that produced no ICMP reply, showing where responses stop coming back
Does a path look different when traced over an existing session versus a fresh probe?
reuses the connection's real sequence and acknowledgment state to generate its probes, so the hop list reflects what that specific TCP session's packets pass through rather than a synthetic packet a filter might treat differently
Languages
Command line
No command matches.
| option | found in | since | description |
|---|
Values are placeholders taken from each option’s declared default. Nothing is executed here — the output shown is a recording of a run that already happened.
Release-note detail over time
See how much detail intrace puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.
Checking release-note history…
Releases
Nothing shipped since we started watching. Releases and docs updates land here as they happen.
Project health
Issue, contributor and maintainer activity in robertswiecki/intrace, 2023-10 – 2026-09, as of 2026-09-25. Twelve-month figures first; the trend lines run the whole window.
- Contributors 0 ±0 vs prior 12 months
- Maintainers 0 +0 joined · −0 left, last 12 months
- Bus factor 0 committers behind half the commits
- Community-filed not measured of issues opened, last 12 months
- Median time to close not measured issues closed, last 12 months
- Open backlog 3 of 11 issues ever filed
- Issues opened / month 0 · 0 communitymaintainers
- Open backlog 3
- Contributors / month 0
- Commits / month 0
- Stars 73
Counts from the project's public repository and git history; no individuals are identified. Maintainers are the committers covering 80% of the last year's commits. how we measure this
Libraries its release ships
What its latest release locks, checked against known advisories.None of its release's images build from a lockfile we can read.
Add the badge to your README
Maintain this project? The badge links readers straight to this page, so they can follow every release here.
Choose a badge style and copy the code →