Take a look at hping, which can do traceroute-like analysis with "pings" that aren't really ICMP packets: TCP, UDP, whatever.