Forum Home
Press F1
 
Thread ID: 43364 2004-03-12 08:12:00 "ICMP Time Exceeded for a Datagram" Huh, what's that? Asker (5264) Press F1
Post ID Timestamp Content User
221923 2004-03-12 08:12:00 I sometimes get that warning message from my Sygate firewall whenever I run programs that aren't even supposed to connect to the internet, like single-player games and video capturing software. What does it mean? I scanned my system for spyware and virii, but none were found... Asker (5264)
221924 2004-03-12 09:11:00 Its informational only. (Generally means don't panic)

Triggers when a IP datagram is received with the protocol field of the IP header set to 1 (ICMP) and the type field in the ICMP header set to 11(Time Exceeded for a Datagram).

If you can work that out, then good luck....
godfather (25)
221925 2004-03-12 10:29:00 So uh, why would those programs be receiving IP datagrams in the first place? It's pretty annoying when you're playing a game in full screen mode and it suddenly goes out of focus because of the aforementioned message popping up.

This reminds me of that other time when I had to set the firewall to block Microsoft... For some reason almost every single one of my applications had attempted to transmit something to one of their sites.
Asker (5264)
221926 2004-03-12 10:40:00 What have you got your firewall reporting level set to? I'd set it to low or something so its not reporting every random event.

> This reminds me of that other time when I had to set the firewall to block Microsoft... For some reason almost every single one of my applications had attempted to transmit something to one of their sites.

Now thats interesting. I'm going to give it a try and log the attempts :)
PoWa (203)
221927 2004-03-13 09:29:00 Argh, I got the same message again from one of the programs:

"C:\Program Files\WC6\wc6.exe is trying to send an ICMP Type 11 (Time Exceeded for Datagram) packet to (145.94.202.182). Do you want this program to access the network?"

I've just noticed something: It says the program's trying to send a packet, not receive. Where the heck is it sending this supposedly harmless datagram to, and why?
Asker (5264)
221928 2004-03-13 10:57:00 What program is that? Investigate it a bit. Probably got a trojan, or is a it a program you actually want? PoWa (203)
221929 2004-03-14 01:27:00 Hmm, I don't think it's the programs themselves that are causing the problem, since I also get the ICMP messages when I run some of the stuff I download from sourceforge.net (all open source applications, can't possibly have trojans in them). Asker (5264)
1