The capture shown in my article was captured with tcpdump on the linux box performing the traceroute. I used Etherpeek to open the dump so that it would be more readable. The reply packets are definitely port unreachables - type 3, code 3. There is no question about that. It would seem to follow then, that the router is opening layer 4. JMcLaren - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
