Hacker News new | ask | show | jobs
by cyphar 3761 days ago
I didn't know that. But I guess the reason why it's not just implemented that way by default is so it can be easily ported (even if all kernels supported it, relying on the kernel implementation of ICMP packets might cause inconsistencies you wouldn't see in raw sockets).
1 comments

It is the same interface, and I believe all the implementations are compatible with it, it just filters the types of raw packets you are allowed to create.