Skip to main content

Questions tagged [icmp]

ICMP stands for Internet Control Message Protocol. It is primarily used by the operating systems of networked computers to send error messages indicating service status.

Filter by
Sorted by
Tagged with
1 vote
1 answer
66 views

How to demo ICMP Type 3 Code 4, Fragmentation Needed and Don't Fragment was Set

I would like to demo a situation where the MTU traffic is higher than one accepted. So, source would receive the ICMP Type 3 Code 4 as reply. I am trying with two Linux instances running on AWS. Both ...
Azize's user avatar
  • 160
0 votes
2 answers
82 views

Ping shown 0 received, 100% packet loss. But the captured packets shown the reply packets is ok

I pinged a host, shown 0 received, 100% packet loss. The captured packets show a reply, however the message "admin prohibited filter" is displayed.
Donghua Liu's user avatar
0 votes
0 answers
15 views

ICMP Destination unreachable with Accounting-Request replicate in freeradius

I am using the replicate function on the accounting section and everything works as expected: the destination server receives the message as intended, and freeradius continues working not worrying ...
Rafael Domínguez's user avatar
1 vote
0 answers
65 views

check_ping in nagios resolves to ipv6 instead of ipv4

mn1.testchn1s1.ind ~# /usr/lib64/nagios/plugins/check_ping -H mn1.testchn1s1.pub -w "700,60%" -c "1400,100%" -p 5 -4 -s PING OK - Packet loss = 0%, RTA = 0.10 ms - mn1.testchn1s1....
sree's user avatar
  • 11
0 votes
0 answers
49 views

ICMP request | By Virtual NIC | no response

The Issue: I want to Understand what's going on when I'm sniffing from the host machine with Wireshark for instance packets that are coming from the VM that is bridged directly to the physical network....
Eden Refaelov's user avatar
1 vote
0 answers
44 views

Embedded Board Replies to Pings in Wireshark but not in Windows

I have an embedded board (running a Cortex-M7), and LWIP for the networking library. MAC is integrated to the CPU, but has an external PHY. I go ahead and initialize LWIP, and when I ping the board ...
Shaken_U's user avatar
0 votes
1 answer
262 views

Route an incoming ICMP packet to a different interface/process

I have an interface enp4s0 with several IPs. I get ICMP packets (type 8, echo request) from external device to my device on enp4s0. I'm trying to route only packets sent to 192.168.1.90 into another ...
hudac's user avatar
  • 136
1 vote
0 answers
75 views

Linux confusing MAC addresses for its IP addresses to Cisco switch?

I have multiple CentOS boxes (both Centos 7) with two different servers. These servers have 4 10GB interfaces each. They are connected to two Cisco Nexus switches. Each NIC has a different IP address, ...
user1955162's user avatar
2 votes
0 answers
987 views

ICMP TTL exceeded replies with destination IP from NAT router

I'm playing with nftables and observe strange behaviour which I cannot explain. I have three VMs, source, router and destination. All run latest Oracle EL 8.5 and are configured via nft. source has ...
Reisse's user avatar
  • 21
0 votes
0 answers
925 views

How to identify application that is generating ICMP echo requests on Windows 10?

My company security team has informed me that my workstation is pinging some "blacklisted" IP addresses. The enterprise security tool reporting this information sits in place of the usual ...
Gordon Mckeown's user avatar
2 votes
1 answer
1k views

traceroute: sometimes routers don't respond and user sees timeouts

I'm an admin of small network and I'm investigating a problem my users complain about. The root of their complaints is traceroute: sometimes routers along the path simply don't respond to traceroute ...
ico's user avatar
  • 21
1 vote
0 answers
337 views

PMTUD/ICMP black hole problems across a VXLAN tunnel

I'm running a Proxmox PVE host and am trying to use VXLAN to connect the machines running on it to various networks in our Lab. However, I'm running into weird MTU-related problems that I don't ...
Christopher Engelhard's user avatar
1 vote
1 answer
1k views

Ping across IPSec tunnel sends both ICMP and ESP packets

I've been using Strongswan to setup an IPSec tunnel between two units. The tunnels SAs get setup without any issues and traffic can pass across the connection. Whenever I ping across the tunnel, the ...
jcnoe's user avatar
  • 21
0 votes
1 answer
2k views

Local devices aren't reachable via VPN

I have a VPN configured on a router (router model is bintec be.ip plus). VPN Connections are successfully established by the clients using IKEv2 (router is reachable via DynDNS). Router's local ip ...
Abid's user avatar
  • 145
1 vote
1 answer
40 views

VLAN Inner Talking

I kinda forgot about CISCO in general, it had been quite a while since I last touched packet tracer. Now I'm on the PRE-deployment phase of a network at work. Long story short. -I made 2 VLAN on CISCO ...
Daniel Cruz's user avatar
2 votes
1 answer
4k views

ping: Warning: time of day goes back (-203647us), taking countermeasures

I'm getting the below weird warning message sometimes when pinging to 8.8.8.8 (Occurrence is very low). Any idea about the root cause? $ ping 8.8.8.8 PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 ...
Harikrishnan's user avatar
  • 1,269
0 votes
1 answer
2k views

ICMP/Ping works even after adding iptables drop rule

We have an application which will configure network interface as well as iptables rules based on user configuration. Please find the iptables rules after configuring with the application Even after ...
Gilson PJ's user avatar
  • 101
0 votes
1 answer
166 views

Forwarding packets using multiple servers

I have a IP block from RIR. I'm using two providers for make anycast to "some" IPs. I will call this as A and B. I want forward to other provider when that IP not at that location. I'm using ...
Hoto Cocoa's user avatar
0 votes
1 answer
245 views

when router sends ICMP protocol error message how does it set it's own TTL?

when using (traceroute -q 1 serverAddress), we know that it starts with TTL(Time to Live) = 1. when it goes through router, the router decrements TTL by 1. If TTL becomes 0 at that router, it sends ...
David Roonie's user avatar
1 vote
1 answer
144 views

WCF Discovery on Windows Server 2019 getting ICMP Typ 3 Code 3

The problem: I've installed Windows Server 2019 and I am trying to discover my WCF services running on a Windows Server 2012R2. But that's not working and in Wireshark I see a ICMP Destination ...
squadwuschel's user avatar
0 votes
0 answers
624 views

When connecting from one subnet to another through a WireGuard VPN, why TCP requires NAT on both sides but ICMP works without NAT?

I encountered this issue today with the following setup: [Cloud Server] --> [Cloud Gateway Server] <- WireGuard -> [Home Router] <-- [Home Device] I have source NAT on my router. My home ...
Minsheng Liu's user avatar
1 vote
1 answer
2k views

Why have AWS decided to block ICMP by default on new EC2 machines?

From Why can't I ping my freshly set up amazon web service EC2 instance? it seems that the architects from Amazon's AWS have chosen to block ICMP by default. Is there some official source stating ...
sashoalm's user avatar
  • 177
2 votes
1 answer
901 views

ICMP "Port Unreachable" when sending email

Since several months I have sporadic problems when I send emails. With tcpdump I finally found out that I'm getting "Port unreachable" messages from what seems to be my email provider, ...
bug.spencor's user avatar
0 votes
1 answer
681 views

UFW Weird ICMP log record - Pinging is blocked

In the log records below I have replace my eth MAC address with ETH_MAC_ADDRESS the IP of my server with MY_SERVER_IP and other IPs with STRANGE_IP plus a number to distingue. Jan 29 15:11:48 cld ...
fat_mike's user avatar
  • 123
0 votes
1 answer
873 views

iptables and SNAT spoofing

So we are working with iptables at class and I've been testing some rules in the NAT table. As far as I know SNAT changes the IP source of a packet to which the rule dictates but what I tested does ...
Deketh's user avatar
  • 1
1 vote
1 answer
2k views

Stop Ubiquiti ICMP restrictions (two concurrent pings at once from same host for traceroute)

How do I change the Ubiquiti Security Gateway's default icmp restrictions from inside the LAN? It seems that my Ubiquiti Security Gateway's default settings will drop icmp packets if I'm doing more ...
Michael Altfield's user avatar
-2 votes
1 answer
375 views

Firewall rules does not apply to pfsense hosted machine [closed]

I am using pfsense as my home firewall and configured multi-wan setup. In addition, I have installed package 'Telegraf ' package for exporting my pfsense stats into InfluxDB, also in 'Telegraf' ...
JavaMachine's user avatar
1 vote
1 answer
460 views

icmp_echo_ignore_broadcasts not working for broadcast other than 255

In an embedded system using linux 5.3.18 it is required to ignore ICMP broadcasts. This device IP set to 192.168.0.34/25, so the broadcast will be 192.168.0.127. The flag controlling this behaviour ...
GurstTavo's user avatar
  • 111
8 votes
2 answers
9k views

Why 224.0.0.1 traffic is filtered by Linux hosts?

When sending an ICMPv4 echo request to a destination address like 224.0.0.1, it is ignored by Linux hosts receiving the request. The destination MAC address used is 01:00:5e:00:00:01. The only way to ...
djoproject's user avatar
-1 votes
1 answer
3k views

firewalld causing nmap to return host seems down

I've two machines, server1 and server2. On server2, I stop firewalld. [root@server2 ~]# systemctl stop firewalld From server1, nmap returns Host is up. [root@server1 ~]$ nmap -sn server2 Starting ...
JeremyCanfield's user avatar
6 votes
1 answer
1k views

Can't ping EC2 instance after enabling ICMP packets [closed]

I followed this guide to allow me to ping my EC2 instance. In my security group I have Custom ICMP Rule - IPv4, Echo Reply, N/A, Anywhere. However it simply doesn't work. If i run ping ec2-X-X-X-X.ap-...
JacksonCounty's user avatar
0 votes
2 answers
3k views

How do I limit ping (ICMP) responses on a debian 10 server?

I have a VPS with debian 10 installed, primarily used for website hosting. when I issue a ping to the server from a remote machine, I am able to and receive responses for packet sizes up to around ...
pulsar's user avatar
  • 193
2 votes
1 answer
393 views

Difference between icmp and icmpv6 for ip6tables?

I found the following lines in a firewall script on one of our Linux servers (kernel 5.x) ip6tables -A INPUT -p icmp -j ACCEPT ip6tables -A INPUT -p ipv6-icmp -j ACCEPT The two commands both run ...
iBug's user avatar
  • 1,377
1 vote
2 answers
1k views

Does NAT spoof TCP or UDP port in ICMP payload?

When I send a tcp or udp packet from a network under symmetric nat I expect the port to be different from the one chosen by my computer and so it is. But when I send a udp packet with a low ttl, but ...
J. Doe's user avatar
  • 13
0 votes
1 answer
944 views

NBNS Query = ICMP Destination Unreachable

I am having some difficulties when I am trying to get the NetBIOS Name of a machine by it's IP Address with the command (On Windows) nbtstat -A 192.168.1.1, In this example I am trying to get the name ...
Dan's user avatar
  • 1
3 votes
1 answer
10k views

How to monitor ping packet loss via prometheus exporters?

I'm already trying to use this exporters for simple icmp probes: https://github.com/prometheus/blackbox_exporter It gives only 3 icmp latency metrics https://github.com/czerwonk/atlas_exporter ...
Kein's user avatar
  • 131
0 votes
1 answer
951 views

measure the latency/delay with ICMP (ping)

How to measure latency (not rtt) using ICMP (ping) on linux ? The Internet Control Message Protocol (ICMP) is a supporting protocol in the Internet protocol suite.
USER's user avatar
  • 63
-1 votes
1 answer
2k views

Whitelist ICMP traffic with iptables

I'm configuring iptables, for an Ubuntu Server VPS. It runs sshd, and various Dockerised web apps. It is not a router, and is not part of a complicated network. After researching the topic, I decided ...
lonix's user avatar
  • 978
-1 votes
1 answer
304 views

ICMP types commands on CMD?

To use ICMP type 8 we write : >ping IP@. I was wondering what commands would allow me to use other types of ICMP like type 13?
medilies's user avatar
  • 103
1 vote
0 answers
79 views

SmartOS can't ping any ip that resolves to failover ip

Our server is running SmartOS, we have 2 network cards one for internal use (10.x.x.x) and one external, i am able to ping any website / service except domains that resolve to our Failover IP (The IP ...
ChatN0ir's user avatar
0 votes
1 answer
1k views

nmap - get detailed output for requests?

Update 2: pf already defaults to drop. What causes nmap to notice the server? What does 'received reset' mean? Update 1: Maybe I misinterpreted my findings. When run with -v2, nmap tells me that "...
loopend's user avatar
  • 11
0 votes
0 answers
335 views

IPSec tunnel causes huge packets lost when pinging gateway and other machines

My Ubuntu machine is 10.0.0.15, my Windows machine is 10.0.0.10. My gateway, that routes the Internet traffic to the LAN is 10.0.0.1. When I ping the gateway from my Windows machine everything is ...
Michal B.'s user avatar
  • 107
0 votes
1 answer
2k views

Disable ICMP reply on CentOS 7 firewall, except some IP blocks

I have a Centos 7 machine with FirewallD, and net.ipv4.conf.icmp_echo_ignore_all is set to 0. I'm seeking for some firewall configs to disable ping replies to external IP addresses, but allow some IP ...
Mohammad Reza Danesh's user avatar
0 votes
2 answers
1k views

Block ICMP echo responses using the Windows Firewall

I'd like to block ICMP Echo Reply messages from leaving a Windows 10 computer, but still have Echo Requests come in. I created an Outbound rule, but couldn't see which option to choose for replies. ...
Fidel's user avatar
  • 432
0 votes
3 answers
1k views

Stop Windows 10 from sending ICMP Echo Replies

Is there a setting (in the registry perhaps) which disables Windows 10 from sending back ICMP Echo Replies? (Without just blocking them at the firewall)
Fidel's user avatar
  • 432
3 votes
1 answer
3k views

Forwarding ICMP response to TAP interface

I am trying to do a test where I forward ICMP responses to a TAP interface. I created a TAP interface and assigned it the address 10.0.4.1/24. My linux setup uses the interface enp0s3 as the default ...
Jake's user avatar
  • 145
0 votes
1 answer
306 views

understanding a psad error for src 0000:0000:0000:0000:0000:0000:0000:0000

My server is generating this psad error. I am not sure what it means? I think it is saying an IPv6 ping request was blocked but am not sure. And if it is a ping request, is it from the server to ...
IMTheNachoMan's user avatar
1 vote
0 answers
936 views

How to allow responding to broadcast pings on Mikrotik RouterOS?

By default, most systems don't respond to broadcast ping requests. However, there exist ways to explicitly allow responding to broadcast ICMP requests on multiple systems, such as Linux. How can I ...
TheNavigat's user avatar
1 vote
0 answers
125 views

DPM breaking network connectivity to itself

I'm backing up a specific folder in a VM (server 2016) with DPM (SC2016). Both have all the updates installed, latest patch versions. I noticed that after the initial replica, the backups have been ...
user2629636's user avatar
9 votes
2 answers
790 views

nic: Something Wicked happened! ffff

I'm configuring a GNU/Linux Router with Debian Stretch (9.7) and before rebooting the server, all traffic from one interface to another was going ok, but after that, I received a message like this (...
ivanleoncz's user avatar
  • 1,761

1
2 3 4 5