Subject: Re: pcap and ICMP messages
To: <>
From: Ignatios Souvatzis <ignatios@cs.uni-bonn.de>
List: tech-net
Date: 09/15/2004 12:04:26
--wRRV7LY7NUeQGEoC
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Sep 15, 2004 at 11:34:01AM +0200, J=F6rn Seger wrote:
> Am Mittwoch, 15. September 2004 11:20 schrieben Sie:
> > On Wed, Sep 15, 2004 at 10:14:08AM +0200, J=F6rn Seger wrote:
> > > Hi all,
> > >
> > > I' m testing a communication protocol, which is based on ip. The
> > > implementation is done with pcap. When I send arround packets, I allw=
ays
> > > get some ICMP "protocol unreachable" back, what is completely correct
> > > from the kernels point of view. But for me it's not really nice ...
> > >
> > > Any ideas/hacks to stop the kernel from sending these messages?
> >
> > open a raw IP socket for said protocol instead of using pcap?
>=20
> I used something like that under linux, but on a BSD system I don't find =
a way=20
> to get a packet directly from the data link layer without pcap (with the=
=20
> IP-Header included).

why do you need the IP-header? The kernel's IP stack can handle it fine,
normally... (unless you want to do the strange things traceroute asks for..=
.)

	-is

--wRRV7LY7NUeQGEoC
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: 2.6.i

iQEVAgUBQUgTqDCn4om+4LhpAQGhUgf+McwVWvJehGuVrfMrShnySAqyBqbRdBYF
aswKy6W09K9MwxTunwLNhnJIII1oLg/wiLaZmQane6XQbCh8frAXnkAgred8MQlu
G4eXZBf4RxdlZmEodrmJkkxYbFxm6dz3hiZF7aOK6cHkgTZHeJCRxGAHHliyu5TI
IGGvNn3EX2awbOWf8yECV5SICJhTW2wjAPGaPJ/+JYZTk1ayzNwaVJLVovrKp2Pe
GHRu7QyMIgmBLS2A8qK4HXhKMGz3VKsjrgPFpO4wuv07k464laOlKztBQkDYEcVV
gqdRVz3pimrb+tn5yErpxhMrXbFRl6IY0N/FxwNbQM8z7U0lWiG+jg==
=Z3TV
-----END PGP SIGNATURE-----

--wRRV7LY7NUeQGEoC--