Wireshark · Ethereal-users: Re: [Ethereal-users] Re: ICMP

[ronnie sahlberg <ronniesahlberg@xxxxxxxxx>]

Expand the ICMP packet and you will see that  encapsulated inside
the ICMP payload is  an IP packet and ontop of the IP header is the UDP header.





On Mon, 21 Mar 2005 19:06:57 -0500, James Knott <james.knott@xxxxxxxxxx> wrote:
> ronnie sahlberg wrote:
> > That is what is supposed to happen.
> >
> > Rationale:
> > You asked for all packets containing the UDP protocol and you got them.
> >
> > An analyzer that filtered for UDP and did not show you these pacekts
> > to you would be broken. Ethereal is not broken in this regard.
> 
> ICMP is not UDP.  Why should Ethereal show something that's not selected?
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>