Re: [nsp] traceroute and icmp

From: kevin graham (kgraham@dotnetdotcom.org)
Date: Fri Nov 30 2001 - 12:35:09 EST


> > Unix and Cisco IOS choose to use a UDP variant of it. Microsoft uses a
> > straight ICMP.
>
> Hmmm, you word it as if "ICMP is the right (or 'original') way of doing
> it" - it isn't, VJ wrote the Unix version, using UDP.

...of course, most modern traceroute's have a '-I' or equivalent flag to
use ICMP rather than UDP. In the day and age of paranoid ACL'ing, when
working close to edges, probably have a better chance of ICMP echo's
getting through than ephemeral-to-ephemeral UDP.

..kg..



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:56 EDT