在ICMP错误层没有ICMP TTL [英] No ICMP TTL at ICMP Error layer

问题描述

似乎在FWPS_LAYER_INBOUND_ICMP_ERROR_V4层未报告超过ICMP生存时间(类型11).如果这是设计使然，为什么超出时间不视为错误?

It appears that ICMP Time To Live Exceeded (type 11) is not reported at the FWPS_LAYER_INBOUND_ICMP_ERROR_V4 layer. If this is by design, why is time exceeded not considered an error? thanks.

推荐答案

我无法对此进行复制.是什么让您相信FWPM_LAYER_INBOUND_ICMP_ERROR_V4中未显示TIME EXCEEDED错误?在此层进行处理之前是否有可能阻塞了数据包?

I am not able to repro this. What leads you to believe the TIME EXCEEDED errors are not indicated at the FWPM_LAYER_INBOUND_ICMP_ERROR_V4?  is it possible that the packet was blocked before processing at this layer occurred?

在这些层上未显示的唯一ICMP错误是SOURCE_QUENCH和REDIRECT，因为Microsoft TCPIP堆栈实际上并没有将它们解释为错误(在这种情况下，您可以过滤这些@ FWPM_LAYER_INBOUND_TRANSPORT_V4)

The only ICMP errors not indicated at these layers are SOURCE_QUENCH and REDIRECT, as these are really not interpreted as errors by the Microsoft TCPIP stack (in which case you could filter for these @ FWPM_LAYER_INBOUND_TRANSPORT_V4)

希望对您有帮助

Hope this helps

这篇关于在ICMP错误层没有ICMP TTL的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！