Tracert Command: How to Traceroute on Windows, Mac & Linux

What Is the Tracert Command?

Tracert (trace route) is a Windows command that shows the path your traffic takes to reach another host — every router ("hop") along the way and how long each one takes to answer. On macOS and Linux the same tool is called traceroute.

It's the tool to reach for when a website is slow or unreachable and you want to know where the problem is: on your own network, at your internet provider, somewhere in between, or at the destination. Where ping tells you whether a host answers, tracert tells you the route and where it breaks.

How to Run Tracert on Windows

• Press Windows + R, type cmd and press Enter (or search for Command Prompt).
• Type tracert followed by a domain name or IP address, for example tracert example.com, and press Enter.
• Wait. Tracert probes up to 30 hops, three times each, and waits up to 4 seconds for every reply — a clean trace finishes in seconds, but one full of timeouts can take several minutes. Press Ctrl + C to stop early, or use -d and -w (below) to speed it up.

C:\> tracert example.com

Tracing route to example.com [203.0.113.10]
over a maximum of 30 hops:

  1     1 ms    <1 ms    <1 ms  192.168.1.1
  2     9 ms     8 ms     9 ms  10.20.0.1
  3    12 ms    11 ms    12 ms  198.51.100.33
  4     *        *        *     Request timed out.
  5    24 ms    23 ms    24 ms  203.0.113.1
  6    25 ms    24 ms    24 ms  203.0.113.10

Trace complete.

Each line is one hop. The three numbers are three separate probes; the address on the right is the router that answered. Hop 1 is almost always your own router, and the last line is the destination. (The public addresses above come from the ranges reserved for documentation.)

Tracert Command Options

The syntax is tracert [options] target (Microsoft). The options you'll actually use:

Combine them freely: tracert -d -w 1000 example.com gives the fastest useful trace. To save the result for your ISP or hosting support, redirect it to a file: tracert -d example.com > trace.txt.

Windows tracert has no port option: it always sends ICMP echo requests. To trace the way an HTTPS connection starts, over TCP port 443, use sudo traceroute -T -p 443 on Linux or in WSL, sudo traceroute -e -P TCP -p 443 on a Mac, or our online traceroute over TCP 443.

How to Run Traceroute on a Mac

Open Terminal (Applications › Utilities) and run traceroute example.com. macOS sends UDP probes by default; add -I to use ICMP like Windows does, which often gets answers from routers that ignore UDP. Useful options: -n (no name lookups), -m 30 (maximum hops; the macOS default is 64), -w 2 (seconds to wait per probe) and -q 1 (one probe per hop instead of three).

traceroute -n -I example.com

How to Run Traceroute on Linux

Run traceroute example.com. If the command isn't found, install it (sudo apt install traceroute on Debian/Ubuntu, sudo dnf install traceroute on Fedora) or use tracepath, which is usually preinstalled. Linux traceroute sends UDP probes by default, 3 per hop, up to 30 hops.

$ traceroute -n example.com
traceroute to example.com (203.0.113.10), 30 hops max, 60 byte packets
 1  192.168.1.1  0.612 ms  0.571 ms  0.534 ms
 2  10.20.0.1  8.911 ms  9.004 ms  8.872 ms
 3  * * *
 4  203.0.113.10  24.112 ms  23.980 ms  24.051 ms

To test the path to a web server the way an HTTPS connection starts, trace over TCP port 443: sudo traceroute -T -p 443 example.com.

How to Read Tracert Results

• Timeouts on one middle hop, but later hops answer (* or "Request timed out"): normal. Many routers are configured to ignore or rate-limit these probes. The path is fine.
• Timeouts from one hop to the end: nothing answers the probes after the last hop that replied. If the site still loads, the destination or a firewall in front of it is just dropping the probes: trace again over TCP 443 before blaming the route. If the site doesn't load either, note the last responding hop; that's the network to contact. In a browser, this usually shows up as ERR_CONNECTION_TIMED_OUT.
• A latency jump that stays high for every later hop (for example 10 ms → 120 ms → 121 ms → 125 ms): the delay is real and starts at that hop — often a long-distance link or a congested network. A jump on one hop that drops back afterwards is just that router answering slowly and can be ignored.
• "Destination host unreachable" or "Destination net unreachable" (!H or !N on Mac and Linux, !X when blocked on purpose): a router answered that it can't deliver the packets: "net" means it has no route to that network, "host" usually that the last router can't reach the host itself. Check the address; if it's right, the problem is at or after the router that reported it.
• Private addresses (192.168.x.x, 10.x.x.x, 172.16–31.x.x) or shared 100.64–127.x.x addresses on the first hops: your own router, then your ISP's internal network. A slow hop 1 points to your Wi-Fi or router; a jump at the next hop, to the line to your ISP. If the trace dies there, start with Wi-Fi connected but no internet.
• The trace ends at the destination with low times: the network path is healthy, so a slow website is more likely a server or DNS problem — check it with our DNS lookup and DNS speed test.

How Tracert Works

Every IP packet has a TTL (time to live) counter that each router lowers by one; when it reaches zero, the router drops the packet and sends back an ICMP "Time Exceeded" message. Tracert exploits this: it sends probes with TTL 1, then 2, then 3 and so on, so each router along the path reveals itself in turn, until the destination replies.

The operating systems use different probes. Windows tracert sends ICMP echo requests (the same packets as ping). macOS and Linux traceroute send UDP packets to high ports by default. Firewalls treat these differently, which is why the same trace can look different on Windows and Linux — and why the -I and -T options exist.

Tracert vs Traceroute vs Pathping vs MTR

For intermittent problems, pathping (Microsoft) or mtr is better than a single tracert, because packet loss that only happens now and then won't show up in three probes.

Run a Traceroute Online

A trace from your own computer only shows the path from your network. To see whether a site is reachable from elsewhere, or to test without a terminal, run our online traceroute: it traces from 8 cities at once over ICMP, TCP 443 or UDP and shows each hop with its loss, location and network. Pair it with the Ping test to measure latency and packet loss, and IP Lookup to see who owns a hop's IP address.