1

I'm writing a program to analyze network traffic.

Therefore I want to check the ICMP Type 30 (traceroute). I can't find a pcap file for this case. If I traceroute some website with cmd (traceroute stackoverflow.com), I get only ICMP type 0, 3, 8 and 11.

How can I get a pcap file with traceroute type 30?

Struct
  • 950
  • 2
  • 14
  • 41
  • It sounds like your traceroute is failing, you are getting destination unreachable and timeout packets. But, are you running the traceroute in a command line and watching it succeed while your analysis doesn't seem to pick up the correct packets? – Jacob Aug 13 '14 at 14:35

1 Answers1

2

ICMP Type 30 is deprecated.

Traceroute programs send either ICMP echo requests (type 8) or UDP packets. The packets are sent with low TTL values, triggering routers to respond with ICMP type 11 (Time Exceeded) packets.

Malt
  • 28,965
  • 9
  • 65
  • 105