When I look at a time-to-live exceeded ICMP message (type 11), it contains extra data. what is that data and why does it contain it?

Anonymous

The ICMP (type 11) contains additional data like IP and ICMP inside it. Why?

1 Answer

Sort by » oldest newest most voted

Guy Harris
19890 ●3 ●634 ●207

Because an ICMP Time Exceeded message contains "The internet header plus the first 64 bits of the original datagram's data.", as per RFC 792.

Please start posting anonymously - your entry will be published after you log in or create a new account.

1 follower

Asked: 2018-10-21 08:15:08 +0000

Seen: 811 times

Last updated: Oct 21 '18