Re: [tcptra-dev] Different ICMP-ReturnCodes showing in tcpdump, but not in tcptraceroute

[Richard van den Berg <richard@vdberg.org>]

Thomas Springer wrote:
> looking at a tcpdump, i noticed, that the icmp-codes differ sometimes 
> between icmp48 and icmp36 (standard seems to be icmp36):
>
> example tcpdump-output, done with tcpdump and
> tcpraceroute www.cnet.com:
>
> 09:38:03.656062 IP tbr1-cl1.cgcil.ip.att.net > xx.xx.192.133: icmp 48: 
> time exceeded in-transit

48 is NOT an ICMP type or code. It's probably the size of the message. 
Use ethereal to look at the packets in more detail. For real ICMP types 
and codes see http://www.ietf.org/rfc/rfc0792.txt

Sincerely,

Richard van den Berg
_______________________________________________
tcptraceroute-dev mailing list
tcptraceroute-dev@netisland.net
http://lists.netisland.net/mailman/listinfo/tcptraceroute-dev