> UDP packets also have TTL settings. The response from the > particular router that hits that TTL is still ICMP (time-exceeded), > but the outgoing traffic is UDP. > > man traceroute You're right - I should have RTFM before posting...