Ethereal-users: Re: [Ethereal-users] Re: ICMP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Tue, 22 Mar 2005 18:27:23 +0100
You are right, I've just took a look to a capture containig sctp over
icmp and I've seen that you are right, the whole sctp pdu was in
there.


On Tue, 22 Mar 2005 17:57:58 +0100, Michael Tuexen
<Michael.Tuexen@xxxxxxxxxxxxxxxxx> wrote:
> I have seem more than the first 8 bytes in ICMP packets (protocol
> unreachable)
> in response to SCTP packets....
> 
> Best regards
> Michael
> 
> On Mar 22, 2005, at 16:20 Uhr, LEGO wrote:
> 
> > I took a look to rfc792 (ICMP) and fOr every message supposed to carry
> > the errored packet it says:
> >
> >    Internet Header + 64 bits of Data Datagram
> >
> >       The internet header plus the first 64 bits of the original
> >       datagram's data.  This data is used by the host to match the
> >       message to the appropriate process.  If a higher level protocol
> >       uses port numbers, they are assumed to be in the first 64 data
> >       bits of the original datagram's data.
> >
> > I assume it's just the fisrt 8 bytes. Otherwise it would be a waste of
> > badwidth that at the time when it was written (1981) would had been
> > unacceptable. So far I've never seen more than that.
> >
> >
> > On Tue, 22 Mar 2005 16:10:33 +0100, Michael Tuexen
> > <Michael.Tuexen@xxxxxxxxxxxxxxxxx> wrote:
> >> As far as I know ICMP packets are required to contain
> >> at least the first 8 bytes. But they can contain more...
> >>
> >> Best regards
> >> Michael
> >>
> >> On Mar 22, 2005, at 15:55 Uhr, julien.leproust@xxxxxxxx wrote:
> >>
> >>> LEGO a écrit :
> >>>> On Tue, 22 Mar 2005 15:33:16 +0100, julien.leproust@xxxxxxxx
> >>>> <julien.leproust@xxxxxxxx> wrote:
> >>>> Just a reminder:
> >>>> ICMP messages carry only the first 64 bits (eight octets) of the
> >>>> payload of the errored ip packet. i.e. just enough for the UDP
> >>>> header.
> >>>
> >>> Ok, I didn't know. Too bad, that would have been fun :)
> >>>
> >>> --
> >>> Julien Leproust
> >>>
> >>>
> >>> _______________________________________________
> >>> Ethereal-users mailing list
> >>> Ethereal-users@xxxxxxxxxxxx
> >>> http://www.ethereal.com/mailman/listinfo/ethereal-users
> >>>
> >>
> >>
> >
> >
> > --
> > This information is top security. When you have read it, destroy
> > yourself.
> > -- Marshall McLuhan
> >
> 
> 


-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan