From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-ie0-x22e.google.com (mail-ie0-x22e.google.com [IPv6:2607:f8b0:4001:c03::22e]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id A41C621F0A2 for ; Sun, 3 Feb 2013 23:10:15 -0800 (PST) Received: by mail-ie0-f174.google.com with SMTP id k10so5376246iea.33 for ; Sun, 03 Feb 2013 23:10:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=5sSTTyGAVcVIwKoFCCdhrNpIzP3542j8fs7UtkjxXss=; b=fpUHN4Lc+9H7J/WZZG+XQocFTZpf8qMdRiVVcrEDbQSRvuGvcQFPKS+5o6A2oWd/Rp 0jxNzNO650U0riWZ+CAcFemsFs0RNONeTxnDYKdHfCeh1zFkkw07MpYJDGRl4Pntqs/+ sJ9U5Gct1en/B4xdGpWVC1XG6wwxt3NdqGnifcjSJcUCdsN7nhp+b6NQMONK6+OrXop5 6gasmEv+GwCJmaEtZAxPaQfDoWkgnuUpVfUVjW4ZZ2Hui9rmikieJALUCvQnLtRAZSnW G367++2ksYCN+ivE0xtw2vNyBMxBJnfPGjbW2je4kURbFDTV36gExUc20BwyJsAaWxp5 W9Zg== MIME-Version: 1.0 X-Received: by 10.50.187.225 with SMTP id fv1mr4715594igc.96.1359961814792; Sun, 03 Feb 2013 23:10:14 -0800 (PST) Received: by 10.64.135.39 with HTTP; Sun, 3 Feb 2013 23:10:14 -0800 (PST) Date: Sun, 3 Feb 2013 23:10:14 -0800 Message-ID: From: Dave Taht To: cerowrt-devel@lists.bufferbloat.net Content-Type: multipart/alternative; boundary=14dae9340fe1e0fbde04d4e0c814 Subject: [Cerowrt-devel] ping icmp ttl exceeded X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Feb 2013 07:10:15 -0000 --14dae9340fe1e0fbde04d4e0c814 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I have been largely looking at packet captures for tcp streams. today I noticed that I was oddly getting icmp ttl exceeded messages back on the network from various devices on the path when I wasn't even pinging... I have to admit parsing icmp is not in my skillset. Is there useful information in the icmp messages in this capture? http://snapon.lab.bufferbloat.net/~d/ttl_exceeded.cap --=20 Dave T=E4ht Fixing bufferbloat with cerowrt: http://www.teklibre.com/cerowrt/subscribe.html --14dae9340fe1e0fbde04d4e0c814 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I have been largely looking at packet captures for tcp streams. today I not= iced that I was oddly getting icmp ttl exceeded messages back on the networ= k from various devices on the path when I wasn't even pinging...

I have to admit parsing icmp is not in my skillset. Is there useful inf= ormation in the icmp messages in this capture?

http://snapon.lab.bufferbloat.= net/~d/ttl_exceeded.cap

--
Dave T=E4ht

Fixing bufferbloat with cerowrt: http://www= .teklibre.com/cerowrt/subscribe.html=20 --14dae9340fe1e0fbde04d4e0c814--