Ok, according to Stevens (TCP/IP Illustrated Vol 1), the ICMP Ping Packet
looks like this:


    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |     Type      |     Code      |          Checksum             |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |      Identifier               |      Sequence Number          |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                          Optional Data                        |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

The RFC 792, does not specify a time value, other than IP TTL (at that time,
assumed to be in units of seconds).  I think it really depends on how your
OS has implemented it.  For example, on my Windows PC, the default timeout
is 2000ms.  However, there is an option you can set (-w in the windows
world) to extend that timeout.  Stevens mentions something about newer UNIX
implementations (as of the early 90s) timing out after 20 seconds.  My
Solaris box times out after 20 s, and it is listed in the man pages as such.

HTH

-Joe



-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Ouellette, Tim
Sent: Wednesday, April 10, 2002 8:13 PM
To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'
Subject: Ping times? Am i missing something


The other day while troubleshooting an issue, I saw some pings from out
Tivoli Netview box and it was showing ping times in the 15,000+ ms range. Is
this possible? I though there was a limit on this particular field in the
head. If an of our frame-format experts (Priscilla?)  or sniffer gurus
(again... Priscilla?), could point me someone I'd appreciate it.  Thanks a
bunch!
_________________________________________________________________
Commercial lab list: http://www.groupstudy.com/list/commercial.html
Please discuss commercial lab solutions on this list.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41151&t=41151
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to