Re: [PATCH][IPSEC] IPsec policy can be matched by ICMP type and code

On Wed, 11 Aug 2004 13:14:19 -0600
David Stevens [off-list ref] wrote:

raw sockets predate VJ contributions by many years and are
typically used by protocols not in the kernel. The original "ping"
used raw sockets, as well as routing protocols like BGP and RIP
which are directly encapsulated in IP, without a separate transport
protocol. The original traceroute I believe used UDP and just set
the TTL-- I don't believe it used raw sockets at all. Don't know what
the current versions do; haven't looked in a while.

"ping" does not use the hdrinclude feature.

And IPv6 does support raw sockets; it just doesn't let you
generate bad checksums and some header fields, I expect
to make it harder to write attack software.

So like I said, raw without the hdrinclude feature.