Ethereal-users: [Ethereal-users] Re: ICMP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: ronnie sahlberg <ronniesahlberg@xxxxxxxxx>
Date: Mon, 21 Mar 2005 07:47:22 -0400
That is what is supposed to happen.

Rationale:
You asked for all packets containing the UDP protocol and you got them.

An analyzer that filtered for UDP and did not show you these pacekts
to you would be broken. Ethereal is not broken in this regard.




On Sun, 20 Mar 2005 12:14:27 -0800, Bob Snyder <bob.snyder@xxxxxxx> wrote:
> Why are ICMP packets displayed when a display filter is used that should 
> exclude them?
> 
> For example, when running a traceroute, and with a display filter of 
> "udp", in addition to the outbound UDP datagrams, the ICMP messages 
> returned from each router are displayed as well. I know that the ICMP 
> datagrams include the headers of the datagrams that are being reported 
> on, but apparently their presence allows them to pass through the 
> display filter. Is this behavior intentional? If so, what is the rationale?
> 
> Bob Snyder
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>