Windows Vista - Unable To Receive ICMP Destination Unreachable - P



I am running into an issue receiving ICMP Destination Unreachable - Port
Unreachable packets on a raw socket in Windows Vista - SP1. I'll try and give
a bit of background.

Previously we used a raw socket to send UDP packets where we would set
IP_HDRINCL and as a result provide the source port among other things,
sometimes we would receive ICMP PU packets, which we need to be aware of. We
would receive these via a seperate RAW socket setup to receive all ICMP
traffic.

When we went to Vista we found that having the raw socket set up for the UDP
packets would result in receiving every single UDP packet because the socket
could not be bound to a specific port anymore. Other than the problem of
receiving all UDP traffic to the interface, things otherwise worked as
intended. IE we would still see the ICMP PU packets on the ICMP socket.

To fix the issue of receiving all UDP traffic we went to a normal UDP socket
and bound to a specific port. Now when we receiving an ICMP PU packet (we can
see it in wireshark) it never shows up on the ICMP socket. It's as if the
ICMP PU is somehow "consumed" - something related to the system having a UDP
socket bound to said port.

If anyone has any ideas on this that would be highly appreciated.

Thanks,
-Tom
.



Relevant Pages

  • Re: What is going on with my Dialup?
    ... also forward it to an unused port, and have that port provide the ... verses the RST or ICMP 3,3. ... The lack of response causes the remote computer to make ... Others think that by not responding to unwanted packets, ...
    (comp.os.linux.networking)
  • Re: UDP source port number when using RAW socket??
    ... the source port in a UDP packet is an *optional* ... If you *do* expect UDP packets in reply to the packets you send out, ... then what you really want to do is open a plain UDP socket and bind ... Use your raw socket to send out packets and your UDP socket to receive ...
    (comp.os.linux.development.system)
  • Re: UDP port scan results
    ... "A router which sends ICMP Source Quench messages MUST be able to ... So, let's assume you want to scan 64K port, 10 packets a port to try ...
    (Pen-Test)
  • RE: Simple Scan
    ... ping!= information about a particular port. ... The icmp protocol operates at a higher level than a specific tcp or udp ... Think of ICMP as a scooter, udp as a sports car and tcp as a SUV. ... scan networks/hosts that block ping packets. ...
    (Security-Basics)
  • Re: Traceroute problems with Sockets
    ... >> socket, since by definition a socket is a port and ip address - to no ... >> timeexceeded packets don't have the id, ... > I think I'm recalling that the ICMP packets returning error contain the ...
    (microsoft.public.dotnet.languages.csharp)

Loading