Re: Traceroute and random UDP ports

2008-08-13 Thread John Kristoff
On Wed, 13 Aug 2008 05:24:17 +0530 Glen Kent [EMAIL PROTECTED] wrote: The outgoing packets from traceroute are sent towards the destination using UDP and very high port numbers, typically in the range of 32,768 and higher. This is because no one is gernally expected to run UDP services up

Re: Traceroute and random UDP ports

2008-08-13 Thread Jeff Aitken
On Wed, Aug 13, 2008 at 07:56:53AM -0500, John Kristoff wrote: Also, why do we increase the UDP port number with each subsequent traceroute packet that is sent? I don't know definitively, but I have an of educated guess From /usr/src/contrib/traceroute/traceroute.c: /* * Notes * -

Re: Traceroute and random UDP ports

2008-08-13 Thread Joe Abley
On 13 Aug 2008, at 08:56, John Kristoff wrote: For further information I sugguest consulting Stevens TCP/IP Illustrated chapter 8, dated, but still an indispensable resource. ... or the comments in Van's traceroute.c, which are pleasantly educational. Joe /* * traceroute host - trace

Re: Traceroute and random UDP ports

2008-08-13 Thread Crist Clark
On 8/13/2008 at 6:13 AM, Jeff Aitken [EMAIL PROTECTED] wrote: On Wed, Aug 13, 2008 at 07:56:53AM -0500, John Kristoff wrote: Also, why do we increase the UDP port number with each subsequent traceroute packet that is sent? I don't know definitively, but I have an of educated guess From

Traceroute and random UDP ports

2008-08-12 Thread Glen Kent
Hi, The outgoing packets from traceroute are sent towards the destination using UDP and very high port numbers, typically in the range of 32,768 and higher. This is because no one is gernally expected to run UDP services up there, so when the packet finally reaches the destination, traceroute can

Re: Traceroute and random UDP ports

2008-08-12 Thread Patrick W. Gilmore
On Aug 12, 2008, at 7:54 PM, Glen Kent wrote: The outgoing packets from traceroute are sent towards the destination using UDP and very high port numbers, typically in the range of 32,768 and higher. This is because no one is gernally expected to run UDP services up there, so when the packet