Lesson 3 of 3
Reading traceroute and mtr
2 min
traceroute shows each router between you and a destination. It's useful, but it's also the most misread tool in networking.
Use mtr instead
mtr runs traceroute continuously and shows loss and latency per hop:
mtr -rwc 100 yourcompany.comRule 1: loss in the middle is usually not loss
Routers deprioritise replying to traceroute. A hop showing 40% loss while later hops show 0% is not a problem; that router is simply busy with real traffic.
Real loss continues to the final hop.
Rule 2: look for the jump
Latency should rise in steps that match distance. A sudden jump that stays for all later hops shows where the delay begins. Cairo to Frankfurt adds around 50 – 60 ms; that's physics, not a fault.
Rule 3: the return path may differ
Traceroute shows the path to the destination. Replies may come back a different way, so ask for a trace from the other side too.
Asterisks
* * * means a hop didn't answer, often because of a firewall. If later hops respond, ignore it.
When reporting a problem to a provider, send an mtr with 100+ packets in both directions. It gets resolved much faster than "the site is slow".