Re^2: Invalid ICMP type 69

in reply to Re: Invalid ICMP type 69
in thread Invalid ICMP type 69

After looking at Net::Ping I can see that the received ICMP packet type data starts 20 bytes into the packet. The following code sucessfully unpacks the ICMP Type and Sub-Code.

my($fromtype, $fromsubcode) = unpack("C2", substr($icmpbuffer, 20, 2) 
+);
[download]

Likewise, the NetPacket::ICMP->decode() function requires the same section of the packet and not the full packet that is returned. I wonder what the first portion of the packet is.

Comment on Re^2: Invalid ICMP type 69 Download Code

Replies are listed 'Best First'.
Re^3: Invalid ICMP type 69 by NetWallah (Canon) on Nov 04, 2006 at 01:31 UTC
The first 20 bytes are the IP header. You should be able to use NetPacket::IP to analyze the whole packet, and extract the ICMP payload using `$icmp_data = NetPacket::IP::strip($raw_pkt);` [download] For details on constructing/analyzing ICMP packets, see http://www.goldfish.org/books/TCPIP Illustrated Vol 1/icmp_int.htm . "A closed mouth gathers no feet." --Unknown	[reply] [d/l]

In Section Seekers of Perl Wisdom