Wireshark · Ethereal-users: [Ethereal-users] Re: ICMP

[ronnie sahlberg <ronniesahlberg@xxxxxxxxx>]

That is what is supposed to happen.

Rationale:
You asked for all packets containing the UDP protocol and you got them.

An analyzer that filtered for UDP and did not show you these pacekts
to you would be broken. Ethereal is not broken in this regard.




On Sun, 20 Mar 2005 12:14:27 -0800, Bob Snyder <bob.snyder@xxxxxxx> wrote:
> Why are ICMP packets displayed when a display filter is used that should 
> exclude them?
> 
> For example, when running a traceroute, and with a display filter of 
> "udp", in addition to the outbound UDP datagrams, the ICMP messages 
> returned from each router are displayed as well. I know that the ICMP 
> datagrams include the headers of the datagrams that are being reported 
> on, but apparently their presence allows them to pass through the 
> display filter. Is this behavior intentional? If so, what is the rationale?
> 
> Bob Snyder
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>