> I was under the impression that traceroute used ICMP to do its packet analysis.
> As far as opening up outgoing ICMP goes, I think you're pretty safe unless 
> you're worried about already being comprimised and having someone send out
> sensitive data over the ICMP stream.
> 
> Aaron
>

Actually, traceroute sends UDP packets around port 30k and higher and listens for icmp 
messages.  When it recieves a timeout, it knows how far that packet got.  When it gets 
a port unreachable, it knows it reached the destination host.

You can tell traceroute to use only icmp by using the -I switch i believe.  
Microsoft's tracert uses only icmp i think.

Jacob 
---------------------------------------------------------------------------
Send administrative requests to [EMAIL PROTECTED]

Reply via email to