Access to the Internic Blocked

Vadim Antonov avg at quake.net
Fri Aug 23 02:10:21 UTC 1996


Vince Fuller wrote:

>You'll also need to pursuade your router vendor to violate the ICMP spec,
>which says that ICMP error messages (i.e. TTL exceeded) are never sent in
>response to ICMP messages...

>I suspect that this restriction is precisely the reason that "traceroute" uses
>high-port UDP packets.

That is correct.  (There are other reasons, too).

However, sending ICMP errors in response on ICMP ECHO Request is safe.

Unlike sending random UDP messages to random ports.

Maybe ICMP specs should be updated and this is the rare case when
Microsoft got it right (in spirit, if not letter).

--vadim





More information about the NANOG mailing list