Questions tagged [icmp]
ICMP is the Internet Control Message Protocol. It is used for diagnostic purposes, for querying information, and for transmitting network-level error messages. ICMPv6, the version for IPv6, is also used for configuring nodes on the link.
91 questions
7 votes
2 answers
2k views
ICMP echo traffic doesn't NEED to be operated on a raw socket any more than UDP or TCP traffic does, so why is it done that way?
If you've ever tried writing tools that depend upon ICMP echo requests, you've inevitably run into the same problem as everyone else: you can't do it unless your tool is running as root. When you try ...
0 votes
1 answer
58 views
Linux Off-path ICMP Fragmentation Needed Injection Attack to quic-go library
I was looking at CVE-2024-53259, where an attacker can inject ICMP Fragmentation Needed message to a host with QUIC connection using quic-go library. The cause is quic-go setting IP_PMTUDISC_DO socket ...
1 vote
0 answers
83 views
Why is Linux not sending ICMP6 problem parameter message
I'm performing testing for USGv6 certification against a Linux build made using Yocto (Poky distribution version 5.0 - Scarthgap, Kernel 6.6). All required tests are passing except one: an echo ...
- 11
0 votes
0 answers
314 views
Ping setting source address differences between IPv4 and IPv6
I was testing something and stumbled on this weird oddity: Ping using IPv4 and setting the source address to '127.0.0.1' (works): # ping -I 127.0.0.1 192.168.1.1 PING 192.168.1.1 (192.168.1.1) from ...
- 9
1 vote
1 answer
3k views
Host will not send ICMP "fragmentation needed" if received packet length is greater than its MTU?
I'm in the middle of figuring out an MTU related issue in a network. Lacking some knowledge, hoping to get some clarification here :) I have a setup, where a client host (with MTU=1500 bytes ...
- 13
2 votes
1 answer
1k views
How to disable Ping response (ICMP) in Linux then bring back up?
I'm trying to test the aliveness of some of my services by continuously pinging them to make sure they're up. It checks if 'alive' by pinging the address (192.168.20.1). I've tried disabling it via ...
0 votes
1 answer
496 views
Changing source address of ICMP packets from 1 interface to another
In my box, I have two ethernet interfaces. Due to the constraints of the system I am dealing with, I need all ICMP response messages to have the source address of 1 of the interfaces. An example: A ...
0 votes
0 answers
156 views
ping program not response the icmp error message
My operation like this: ping -s 8950 10.10.1.100 . I can capture the icmp error message(frag needed and DF set, mtu=8900) with tcpdump from the interface, but the ping program not frag packets ...
- 1