> I was under the impression that traceroute used ICMP to do its packet analysis.
> As far as opening up outgoing ICMP goes, I think you're pretty safe unless
> you're worried about already being comprimised and having someone send out
> sensitive data over the ICMP stream.
>
> Aaron
>
Actually, traceroute sends UDP packets around port 30k and higher and listens for icmp
messages. When it recieves a timeout, it knows how far that packet got. When it gets
a port unreachable, it knows it reached the destination host.
You can tell traceroute to use only icmp by using the -I switch i believe.
Microsoft's tracert uses only icmp i think.
Jacob
---------------------------------------------------------------------------
Send administrative requests to [EMAIL PROTECTED]