Hi, I check for protocol 58 and then ask for icmp type and code. Type and code then are 0 sometimes. I cannot send a dump because of privacy restrictions. I am testing in a productive network. I set up a testing environment and try to reproduce the type and flags set to 0 while protocol is 58. I'll send a dump as soon as I reproduce the problem within my test network.
Cheers, Dominik On Mon, Dec 12, 2011 at 20:22, grarpamp <[email protected]> wrote: >> I am using nprobe in version 6.5.0_052311_pro tying to analyse ICMPv6 >> traffic. But can't explain to myself how icmpv6 flags and types are >> generated. Is there a lack of ICMPv6 support? Am I am a missing >> something? >> >> I just printed all icmp messages out to the shell and subsumed I get >> these types over time: >> >> received icmpv6 with type: 0 and flags: 0 >> received icmpv6 with type: 32768 and flags: 1 >> received icmpv6 with type: 259 and flags: 2 >> received icmpv6 with type: 768 and flags: 8 >> received icmpv6 with type: 34048 and flags: 32 >> received icmpv6 with type: 34304 and flags: 64 >> received icmpv6 with type: 34560 and flags: 128 >> received icmpv6 with type: 34816 and flags: 256 >> received icmpv6 with type: 34560 and flags: 384 >> >> I have edited the database.c but like this the flags and types are >> also written into a database. >> >> But the types which are supported by icmpv6 are only up to 255 and the >> flags are nowhere mentioned in the specs. >> >> Any help is appreciated. > > Hey :) Could you send me the distribution source tarball for this version, > or whatever's current on ntop.org these days??? I could have sworn > I'd seen and patched something with ICMP two majors earlier > but can't find the diff. Maybe if I compare the sources I'd have > better luck and could redo it and send it up. Thanks :) Later. _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
