Re: ICMP Packets

From: Hesham (sendmail4me2002_at_yahoo.com)
Date: 04/29/03 

Date: Tue, 29 Apr 2003 13:58:01 +0300

 Tanks Mr.Barry,,

  Is their any web site give more information about these situations...

 Best Regards,
"Barry Margolin" <barry.margolin@level3.com> wrote in message
news:3ubra.5$H_2.651@paloalto-snr1.gtei.net...
> In article <b8j5m0$2da$1@www.isu.net.sa>,
> Hesham <sendmail4me2002@yahoo.com> wrote:
> >In some icmp packets which I get through snort I found a section title as
> >[
> >
> > ** ORIGINAL DATAGRAM DUMP:
> >
> >Their some information belong to some other TCP/UDP connections........
> >
> >** END OF DUMP
> >]
>
> ICMP error packets include the first 64 bytes of the original datagram
that
> prompted the error. This allows the receiving system to extract the
> original packet's header so it can pass the error on to the appropriate
> application process.
>
> --
> Barry Margolin, barry.margolin@level3.com
> Genuity Managed Services, a Level(3) Company, Woburn, MA
> *** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to
newsgroups.
> Please DON'T copy followups to me -- I'll assume it wasn't posted to the
group.