locked
FLOW HANDLES and IGMP at Transport Layer RRS feed

  • Question

  • I am filtering at the transport layer with Win7 and am trying to understand how flow handles are created for IGMP. For UDP and TCP flows appear to map well to 4 tuples(local, Remote port and addresses).  But for IGMP I am getting the same flow mapped to different local addresses. How are IGMP flows created? Is it just that all IGMP packets use the same flow handle?
    Wednesday, November 4, 2009 5:55 PM

Answers

  • flow handle is only well defined for TCP, UDP and ICMP/ICMPv6 (including RAW send/recv of these protocols). You should maintain your own flow table for other protocols.

    Thanks,
    Biao.W.
    Thursday, November 5, 2009 9:04 AM