> The pcap filter will only match packets coming from the target host, > unreachable messages normally originate from a router upstream of the target, > so they would not be caught by the filter. However, the pcap filter matches
Ah, that is a good point. > _any_ packet coming back from the target system, so traffic caused by another > plugin running parallel (or just other traffic on shared media) would cause > this to trigger falsely. None of that seems to matter in this case because > the ping plugin is only trying to determine if the host is online, so the > occurance of any packet coming in from that host would signify that it was > up, although not guarantee that it answers to icmp echo requests ;) I see your point. Perhaps the internal documentation of the script should indicate the reason behind the loose filtering? -- --- Nathan Valentine - [EMAIL PROTECTED] Jabber: NRVesKY AIM: NRVesKY ICQ: 39023424
msg00100/pgp00000.pgp
Description: PGP signature
