Questions tagged [icmp]

For questions about the Internet Control Message protocol.

Filter by
Sorted by
Tagged with
0
votes
1answer
21 views

Static Routing - host to host ping does not work (MikroTik)?

I'm trying to do static routing using actual devices. Below is my setup: The left router is a MikroTik RouterBoard hAP lite. The right router is a MikroTik RouterBoard hAP ac. I want to ping from ...
1
vote
2answers
36 views

why ICMP Time Exceeded packet takes longer ICMP Echo Reply

I've noticed that when I use tracert a certain router(hop) always takes about 200ms to reply back, the rest reply's in 50ms, after digging into it with wireshark I've noticed that tracert uses normal ...
2
votes
1answer
59 views

IPv4 and UDP/TCP packets inside of ICMP packet?

A week ago, after opening wireshark, i was surprised by seing a storm of ICMP packets from different IP addresses. While deep analysing of thoses packets, i noticed that those ICMP packets contains ...
1
vote
2answers
47 views

ICMP distinguish error messages

Can a Internet Control Message Protocol when an error is sent can it tell which datagram that made the error?
0
votes
1answer
36 views

When I send the ICMP packet with 4000B, but the IPv4 segment calculated 4008B

When I send the ICMP packet with data size as 4000B for testing the IP fragment. ping 192.168.2.1 -c1 -s4000 and the Wireshark captured it, Whether is is because of ICMP header? but we know ICMP ...
0
votes
2answers
30 views

What's the Destination unreachable ICMP packet(ICMP payload the UDP) usage? [closed]

In my Mac(192.168.2.228), it will send ICMP packet to my house's router (192.168.2.1). with the info Destination unreachable (Port unreachable) and in the Wireshark packet detail panel, there ...
-1
votes
3answers
219 views

Confusion about TTL when pinging

TTL value of a packet is supposed to decrease 1 at each router from 255 down to zero as follows: But when I ping to 8.8.8.8 the TTL starts at 253 and doesn't change: How can this be explained? Why ...
3
votes
2answers
125 views

Confusion about MTU

I am studying about IP fragmentation and MTU. What I know is MTU is the property of Physical medium, as in the amount of data it can process without having to fragment the data. The default MTU on ...
1
vote
2answers
154 views

How to check cable without ping?

is there any way to check if a network link is physically working, without using ping? Recently bought a Power-Line-Communication device, and I wanted to test if it works. Before pinging the machines ...
0
votes
2answers
33 views

ICMP is a protocol working in the Network Layer. Why does it send few fields of the transport layer while reporting an error?

I was confused if ICMP is a network layer protocol why does it send transport layer fields in its error reporting messages.
0
votes
1answer
47 views

Broadcast ICMP and gratuitous ARP

When sending an ICMP broadcast, all nodes can respond. is it the case of the sender too? If it's the case then: Is it specified somewhere that the sender should respond with gratuitous ARP when the ...
0
votes
2answers
548 views

Permit ping and traceroute and deny all other services using an ACL

my topology is shown below: I would like the networks that are connected to Hermes-Router to be accessible from all the other stations only when I use ping and traceroute. I tried to do this using an ...
1
vote
0answers
84 views

ICMP No Reply Found Issue [closed]

Currently working on a Go based NAT router and when translating ICMP traffic and am seeing some interesting behavior. The clients request is forwarded to the server, the server keeps track of the ...
0
votes
2answers
76 views

How computer “knows” how and what to respond to particulary ICMP messages

How a computer "knows" what to respond to particular ICMP messages? As is known there are various ICMP messages that differ by type and / or code. For example ICMP type 0 is "echo reply", type 13 /14 ...
0
votes
0answers
19 views

latency in the network layer and transport layer [duplicate]

We have several way to measure latency (ping command (ICMP packets), hping(TCP SYN), iperf..).What is the difference between measuring the latency in the network layer and measuring in the transport ...
0
votes
3answers
124 views

Estimate latency between two IP addresses

I would like to estimate what is the latency in sending a packet between two IP addresses. Let's assume that I have two IP addresses: ip1 and ip2. I can easily ping both ip1 and ip2, and the ping ...
1
vote
4answers
3k views

Why ICMP Destination Port Unreachable error messeage is generated for unreliable UDP packets?

My doubt is why an icmp destination port unreachable error message generated for udp. Why we can't simply discard the udp packet if the destination port is not reachable by saying udp is connection-...
0
votes
2answers
161 views

While sniffing with Wireshark, i get lot of ICMP packets in my loop back interface with the word “CKAAAA..” in it, why is this happening? [closed]

So i have a parrot VM, and i tried to use wireshark on the lo interface of it just for fun, now I'm seeing loads of ICMP packets, which seems to be Netbios inside(not sure why is Wireshark naming the ...
24
votes
7answers
12k views

Why can I traceroute to this IP address, but not ping?

I have an IP address and can traceroute to it, but I can not ping. You see, I can traceroute 43.24.226.50: dele-MBP:~ ll$ traceroute 43.24.226.50 traceroute to 43.24.226.50 (43.24.226.50), 64 hops ...
1
vote
2answers
66 views

How does packet tracing deterministically work?

If a packet can take any route, how can you iteratively figure out the path from you to a host? From what I can tell, packet tracing works on the basis that packet_i takes a the route: route(...
3
votes
1answer
48 views

How to handle IPv6 Extension Header Options with action = 01

RFC 8200 section 4.2 states that if a node does not recognize an option type, that node must do some action depending on the 2 higher order bits of the option type. When the higher order bits are 01, ...
2
votes
2answers
145 views

How to handle ICMP-in-IPv6 or ICMPv6-in-IPv4?

Since ICMP and ICMPv6 have different IP protocol numbers, it's technically possible for an IPv4 host to receive an ICMPv6 packet or for an IPv6 host to receive an ICMP packet. Is the host's behavior ...
2
votes
1answer
773 views

Virtual IP failover issue with vmware exsi ip based hashing

We are deploying HA database cluster on exsi which based on virtual IP concept for failover. if One node fail reserved VIP will be assigned to another node we have two exsi nodes and two virtual ...
0
votes
1answer
981 views

How to use ICMP to send message

I was trying to send ICMP package with Payload/Message on server_A to server_B(10.1.1.5) as following: ping -p 12345 10.1.1.5. but when I use Tcpdump to capture the ICMP package from server_A, I ...
2
votes
0answers
684 views

Point to Point ICMP Ping Loss between Juniper MX routers

I am facing problem with regard to 1 x 10G link (which is actually configured as an aggregated Ethernet (ae) i.e ae link contains only single 10G link. This ae link is connected between 2 x Juniper ...
1
vote
0answers
1k views

Modifying linux ping icmp payload [closed]

On analyzing ping request and reply from a windows system to Linux. It was observed that the windows ping request payload was "abcdefghijklmnopqrstuvwabcdefghi" with size 32 bytes Could this ...
4
votes
3answers
2k views

Does a router send frames or packets?

Perhaps it's a novice question, but does a router send/receive frames? When I read about this subject, it seems that routers decapsulate the frame on arrival, and encapsulate the packet in a frame in ...
2
votes
3answers
1k views

Which first eight bytes of the IP datagram are included in ICMP message?

The definition of ICMP message says that it has a type, a code and the first 8 bytes of IP datagram causing error. Question: Which first eight bytes of IP datagram are included in the ICMP datagram? ...
8
votes
2answers
2k views

Are ICMP Redirect messages really bad?

Due to potential for MITM attack, ICMP redirect messages should be blocked. However, the original purpose of the ICMP redirect message is to inform the host of a better router (or gateway). Then, is ...
1
vote
3answers
105 views

Whether the traceroute command only can check “to” path, can not check “back” path?

How to detect the router path of traffic? I use the ipip.net for ICMP traffic: I want to check the out path and back path. such as I have A address 60.248.41.135 and B address 103.248.41.135. ...
4
votes
1answer
157 views

Features of ICMP

I'm taking a Network class and learned ICMP, but I cannot understand the reason why below arguments are applied. ICMP message is not generated on header checksum errors If a datagram carrying an ICMP ...
5
votes
2answers
382 views

Why there are ip(ip) and domain(ip) 's difference and multi rows records in the traceroute?

In the traceroute command: $ traceroute 104.43.54.2 traceroute to 104.43.54.2 (104.43.54.2), 64 hops max, 52 byte packets 1 10.10.10.1 (10.10.10.1) 4.852 ms 4.623 ms 1.588 ms 2 100.64.0.1 (100....
9
votes
2answers
2k views

Where is Ping's “round-trip time” stored in the IP header?

If we use ICMP's ping, we know the TTL and round-trip time are stored in the IP header. In the below IP header map we know TTL's location, but where is the round-trip time? Is it stored in Options?
1
vote
2answers
348 views

CRC done by ICMP?

Is cyclic redundancy check (CRC) done by Internet Control Message Protocol(ICMP)? How can Time to live (TTL) help for this?
1
vote
1answer
211 views

How do ICMP packets travel in a networks?

Questions: I'd like to know how ICMP packets travel in a network? Are they encapsulated within IP datagram? The RFC 792 doesn't explicitly states the layer of ICMP. Are ICMP messages sent using a ...
2
votes
6answers
12k views

Why doesn’t ICMP use port numbers?

Firewall is showed in port no 7 and Google search is also showed in port no 7 so I am confused about how exactly ICMP use the port number. Regards, Bhushan
3
votes
1answer
1k views

How do I permit only specific types of ICMP unreachable packets to be sent out from a Cisco IOS router? [closed]

I have a Cisco IOS router and want to permit only types of ICMP packets to be sent (type 8, code 0 and type 3, code 4). I tried putting an outbound ACL on the interface connecting to the Internet, but ...
5
votes
3answers
6k views

When is 'Timestamp' and 'Timestamp Reply' are used in ICMP protocol?

I started the packet capture in my laptop through Wireshark application. Now through cmd, I pinged some server (say, www.google.com). And i stopped packet capture and analysed the packets being ...
1
vote
2answers
86 views

Pinging a host that is not on

What happens if I send a ping to a host that is off? Do I get an ICMP message with "host unreachable"? Does ICMP say nothing at all because the packet was correctly delivered even though it was not ...
0
votes
2answers
241 views

Ping traverses openvpn tunnel only 1 of 2 times [closed]

I can barely put into words the problem I'm having, but I'll give it a go. I have a pfsense router on which I've set up openvpn to act as a client to connect into another network. This has worked ...
1
vote
3answers
91 views

Spoofed Tunnel Route

What does it mean when tracert always shows a single long jump? The route below is always the same except the last hop goes directly to any destination IP address that I choose. And, how does the ...
1
vote
4answers
146 views

Weird results when pinging

I'm learning IP addressing and routing basics, but I'm facing a problem which I cannot understand, so i have the following structure: Well in this situation, a ping from 130.190.0.16 to 130.190.4.30 ...
1
vote
1answer
147 views

Is there any current use of icmp features like Address Mask Request

I recently looked through the ICMP packettypes and there are some packettypes which in theory allow to request information from a host like the domain name, subnetmask, timestamp,... out of curiosity ...
6
votes
1answer
1k views

Why can I ping IP addresses from 127.0.0.1 to 127.255.255.254?

I thought that the loopback IP address of my machine is 127.0.0.1. I do not understand why am I able to ping IP addresses until 127.255.255.254.
0
votes
2answers
596 views

Traceroute program that does not rely on ICMP echo requests?

Is there any Traceroute program that does not rely on ICMP echo requests? The question is very straight forward, and I can't get into more details at the moment.
0
votes
1answer
187 views

Fingerprinting routers using timestamps

We all know that physical machines can be fingerprinted using timestamps of a clock in the NIC. My question that is it possible to fingerprint/uniquely identify routers based on timestamps? If yes ...
1
vote
2answers
782 views

How to disable ICMP type 9 (router advertisement) on SG300

Oddly enough our cisco SG300's are making "Router Announcements"/"Mobile IP Advertisements" (ICMP type 9) via IPv4 (not IPv6). They are sourced from the IP/MAC of the switch and destined for 224.0.0.1/...
1
vote
1answer
418 views

How do i clear icmp statistics (JUNOS)

I run a rapid ping and then run show system statistics icmp I want to run another ping test but how do I clear out the old stats? clear interfaces statistics all does not clear out the icmp stats
1
vote
3answers
3k views

How to choose TTL value

When viewing the result of a ping request, I always see the TTL value (Time To Live) of the package. As most of you know, this value is used for avoiding endless looping in the internet routing ...
3
votes
2answers
5k views

Difference of tracert and pathping

What is the difference between tracert and pathping command? Thanks