Actually, only the Microsoft tracert command use ICMP echo packets in
traces. Cisco and unix implementations both send out UDP packets with
altered ttl's on high ports (334xx if I remember correctly).
The "3 probes" are just 3 packets sent out with the same ttl. Notice that
you have 3 RTT's aft
Yes, Tony, you are correct. These "probes" are the ICMP ping packets with
some fiddling of the Time To Live counters. The messages you get back are
TTL Expired messages from each of the hosts the Ping packets travel
to/through.
Mark O. (NA/DA)
-Original Message-
From: Tony Tsai
To: [EM
2 matches
Mail list logo
