Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

If you look at the packet details for the port unreachable messages, you should see at least the first 64 bytes of the packet that caused the error, as per pages 4 and 5 of RFC 792. Wireshark should dissect those bytes, which might show you what was being queried.