[Bro] icmp_time_exceeded

Vern Paxson vern at icir.org
Tue Feb 15 23:48:45 PST 2005


> what does the icmp_time_exceeded event mean?

It's its own ICMP message (it indicated a datagram whose TTL expired, so
for example traceroute uses these) - it does not have any relationship to
other ICMP's timing out.

		Vern



More information about the Bro mailing list