How to Read Traceroute Results

Quick Answer

Traceroute shows each network hop between you and a destination. Each line displays: hop number, router hostname/IP, and three latency measurements in milliseconds. Look for where latency suddenly increases - that's likely where the problem is. Asterisks (*) mean the router didn't respond, which is often normal for security reasons. Use ProbeOps Multi-Region Traceroute at probeops.com/tools/traceroute to compare paths from different locations.

When to Use Traceroute

  • Diagnosing slow website or application performance
  • Identifying where packet loss is occurring on a network path
  • Troubleshooting connectivity issues to a specific server
  • Verifying traffic is routing through expected networks
  • Investigating intermittent connection problems

Understanding Traceroute Output

Step 1: Identify Each Hop

Each numbered line represents a router or network device. Hop 1 is usually your local router. Subsequent hops show the path through ISP networks, internet exchanges, and finally the destination's network.

Step 2: Analyze Latency Values

Each hop shows three time measurements in milliseconds. These are three separate probes. Consistent times indicate stable performance. Wide variation suggests network congestion or an unstable connection.

Step 3: Identify Latency Spikes

Compare latency between consecutive hops. A jump from 20ms to 150ms indicates the connection between those two routers is slow. Geographic distance naturally adds latency (cross-ocean links add 60-100ms).

Step 4: Interpret Timeouts and Asterisks

Asterisks (*) mean the router didn't respond to the probe. This is often normal - many routers are configured to ignore traceroute packets for security. If the final destination responds, intermediate timeouts are usually not a problem.

Step 5: Check the Final Hop

The last hop should be your destination. If traceroute never reaches the destination and shows only asterisks, there may be a firewall blocking traffic or a routing problem.

Example: Reading Traceroute Output

Input

Destination: google.com

Output Analysis

Hop 1: 192.168.1.1 (1ms, 1ms, 1ms) - Local router, excellent latency. Hop 2: 10.0.0.1 (10ms, 12ms, 11ms) - ISP first hop, normal. Hop 3: isp-router.example.net (15ms, 14ms, 16ms) - ISP backbone, stable. Hop 4: * * * - Router not responding, normal. Hop 5: google-peer.example.net (25ms, 24ms, 26ms) - Peering point. Hop 6: 142.250.x.x (26ms, 25ms, 27ms) - Google's network, destination reached.

Common Traceroute Patterns

Pattern: High latency at one hop, normal after

The router is slow to respond to ICMP but forwards traffic normally. This is a router issue, not a path issue. Ignore if subsequent hops are fine.

Pattern: Latency increases and stays high

Indicates a congested or distant link. All subsequent hops will show higher latency because it's cumulative. The problem is at the hop where the jump occurred.

Pattern: All asterisks after a certain hop

Either a firewall is blocking traceroute packets or routing has failed. Try using TCP mode instead of ICMP. If the destination is reachable via HTTP, the firewall is likely blocking traceroute specifically.

Related Tools

Guides/How to Read Traceroute Results

How to Read Traceroute Results

Master the art of interpreting traceroute output to diagnose network latency, identify bottlenecks, and troubleshoot routing issues effectively.

Quick Answer

Each traceroute line shows a hop number, router hostname/IP, and three latency measurements in milliseconds. Find problems by looking where latency suddenly spikes between consecutive hops. Asterisks (*) mean the router didn't respond, which is often normal. The issue is at the hop where latency jumps significantly, not necessarily where you see timeouts.

When to Use This

  • Diagnosing slow website or application performance
  • Identifying where packet loss occurs on a network path
  • Troubleshooting connectivity issues to a specific server
  • Verifying traffic routes through expected networks (ISP, CDN)
  • Investigating intermittent connection or timeout problems

Step-by-Step Guide

1

Identify Each Hop

Each numbered line is a router along the path. Hop 1 is your local router, followed by ISP routers, internet exchanges, and finally the destination network.

2

Analyze the Three Latency Values

Each hop shows three round-trip times in milliseconds (three separate probes). Consistent values indicate stability. Wide variation (e.g., 15ms, 150ms, 20ms) suggests congestion.

Good: 25ms 26ms 24ms (stable) Bad: 25ms 180ms 30ms (congestion)
3

Find Where Latency Spikes

Compare latency between consecutive hops. A jump from 20ms to 150ms means the link between those routers is slow or congested. Geographic distance adds natural latency (oceans add 60-100ms).

4

Interpret Timeouts (* * *)

Asterisks mean the router didn't respond - often normal for security. If subsequent hops respond fine, ignore the timeout. Only worry if the final destination is unreachable.

5

Check the Final Destination

The last responding hop should be your target. If traceroute never completes, try TCP mode (-T flag) as some firewalls block ICMP but allow TCP.

Example: Analyzing Traceroute to google.com

Input

traceroute google.com

Output

1 192.168.1.1 1ms 1ms 1ms ← Local router 2 10.45.0.1 12ms 11ms 12ms ← ISP gateway 3 core-rtr.isp.net 15ms 14ms 15ms ← ISP backbone 4 * * * ← No response (normal) 5 peering.google 45ms 44ms 46ms ← Peering point (+30ms jump = geographic) 6 142.250.80.14 46ms 45ms 47ms ← Google edge (destination ✓) Analysis: Healthy path. The 30ms jump at hop 5 is normal cross-network latency. Final latency of ~46ms is good.

Common Pitfalls & Quick Fixes

Problem: High latency at one hop but normal at subsequent hops

Fix: The router is slow to respond to ICMP probes but forwards traffic normally. This is a reporting artifact, not a real problem. Focus on cumulative latency at the final hop.

Problem: Traceroute shows all asterisks (* * *) after a certain point

Fix: A firewall is blocking ICMP packets. Try TCP traceroute mode (traceroute -T) or use MTR for more detailed analysis. If the destination works via browser, the block is ICMP-specific.

Problem: Latency is high but varies wildly between probes

Fix: Network congestion or an unstable link. Run multiple traceroutes at different times to identify patterns. The issue is likely at an overloaded router or saturated link.

Try it yourself

Use our free Traceroute to run these checks from 6 global locations.

Open Traceroute
View API Docs