Date: Mon, 11 Sep 2000 10:47:42 -0700 From: "Bruce A. Mah" <bmah@FreeBSD.ORG> To: Ian Smith <smithi@nimnet.asn.au> Cc: Emmanuel Gravel <egravel@earthlink.net>, freebsd-net@FreeBSD.ORG Subject: Re: Strange TTL Exceeded messages Message-ID: <200009111747.e8BHlga36000@bmah-freebsd-0.cisco.com> In-Reply-To: <Pine.BSF.3.96.1000911053145.10146D-100000@gaia.nimnet.asn.au> References: <Pine.BSF.3.96.1000911053145.10146D-100000@gaia.nimnet.asn.au>
next in thread | previous in thread | raw e-mail | index | archive | help
--==_Exmh_73906284P Content-Type: text/plain; charset=us-ascii If memory serves me right, Ian Smith wrote: > On Sun, 10 Sep 2000, Emmanuel Gravel wrote: > > I know that icmp ttl exceeded messages are common with a traceroute, > > however why would I get so many from the same host (in a normal situation, > > considering I would have actually done a traceroute, which isn't the case) > ? > > Can't imagine. Hi-- I'm coming in to the middle of this thread (which I think probably belongs on -security anyways), but: 1) traceroute(1) can be told how many probe packets to send per hop. 2) There exist other programs that look like traceroute, but send many more packets per hop. In particular, the family of programs that includes pchar, pathchar, and clink, which are all experimental tools for network path characterization. I haven't a clue as to whether any of this information applies to the situation being discussed though. Bruce. --==_Exmh_73906284P Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0i for non-commercial use MessageID: R6Q45eI5m5gjzFJqBkFpdFEO6eukCUSz iQA/AwUBOb0avtjKMXFboFLDEQI8HgCgv1Hq3HD5N5jqe9wSrk1uV7rXQNsAnA0k s7U4ug294Q5E9kxG0gtB7Ugk =fp4S -----END PGP SIGNATURE----- --==_Exmh_73906284P-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200009111747.e8BHlga36000>