Dominik in nprobe deri@iMacLuca 58> ./nprobe -h|grep ICM [ 32] %ICMP_TYPE %icmpTypeCodeIPv4 ICMP Type * 256 + ICMP code
So in case of ICMP ECHO REQUEST/REPLY (see fields in red) [2a00:1620:c0:7d:21c:f0ff:fe6e:b6ed]|[2a00:d40:1:1:192:12:192:114]|0.0.0.0|0|0|3|312|1323592185|1323592187|0|0|0|58|0|0|32768 [2a00:d40:1:1:192:12:192:114]|[2a00:1620:c0:7d:21c:f0ff:fe6e:b6ed]|0.0.0.0|0|0|3|312|1323592185|1323592187|0|0|0|58|0|0|33024 So it works for me. if not for you, please debug it and mail me that code patch Thanks Luca On Dec 10, 2011, at 12:57 PM, Dominik Elsbroek wrote: > Hi > > I am using nprobe in version 6.5.0_052311_pro tying to analyse ICMPv6 > traffic. But can't explain to myself how icmpv6 flags and types are > generated. Is there a lack of ICMPv6 support? Am I am a missing > something? > > I just printed all icmp messages out to the shell and subsumed I get > these types over time: > > received icmpv6 with type: 0 and flags: 0 > received icmpv6 with type: 32768 and flags: 1 > received icmpv6 with type: 259 and flags: 2 > received icmpv6 with type: 768 and flags: 8 > received icmpv6 with type: 34048 and flags: 32 > received icmpv6 with type: 34304 and flags: 64 > received icmpv6 with type: 34560 and flags: 128 > received icmpv6 with type: 34816 and flags: 256 > received icmpv6 with type: 34560 and flags: 384 > > I have edited the database.c but like this the flags and types are > also written into a database. > > But the types which are supported by icmpv6 are only up to 255 and the > flags are nowhere mentioned in the specs. > > Any help is appreciated. > > Cheers, > Dominik > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc --- Due to lack of interest, tomorrow is cancelled - Kaiser Chiefs
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
