Talk:Internet Control Message Protocol/Archive 1

Archive 1

Creating single article with description of control messages

Rather than having a separate article for each control message I think it would be better to have a single article containing them all. List of ICMP control messages would be a suitable name. Comments? reetep 19:06, 31 May 2005 (UTC)

ICMP is a supporting protocol to IP, but in the protocol stack it's relative position is higher than IP as ICMP receives services from IP.

Color accessibility

In the table of the segment structure, the ICMP header is only labeled with color. The Wikipedia Accessibility guidelines do not recommend this since blind people cannot differentiate the important information. Please use text notes, bold, italics, or some other form of distinguishment. --65.11.180.160 05:48, 20 June 2007 (UTC)

ICMP segment structure ?

Echo and Timestamp request / reply (and some others) use identifier and sequence numbers. Other ICMP messages (such as Destination Unreachable) do not use them. I think the figure is wrong for illustrating ICMP as a whole. Rjgodoy (talk) 01:53, 28 February 2008 (UTC)

Ghost pings

Why, when a computer crashes so badly that all other I/O screeches to a halt, TCP applications stop working, etc, will some computers still respond to ICMP packets? What is it about the ICMP implementation of any given network stack or OS kernel that would make that happen?

Reply: ICMP, being a supporting protocol to TCP and UDP, is usually handled at a very low level in the TCP stack, possibly even inside the NIC. Most modern NIC's support some kind of TCP speedup by implementing part of the TCP stack inside hardware. Usually, some level of ethernet handling is even performed while the machine is off. —Preceding unsigned comment added by 194.171.50.224 (talk) 10:26, 26 June 2008 (UTC)

== ICMP will normally run on port 135 ==.

What on earth is that about?

Reply: AFAIK, ICMP does not use ports really, because it runs only over IP and not over TCP or UDP that give port numbers. It gives information about ports, so if you're getting a lot of ICMP about port 135, maybe you're experiencing an attack there. --Sonny Moonie (talk) 10:54, 17 May 2008 (UTC)

ICMP does not have any assigned port number. What it has is an protocol number, in fact, ICMP's got protocol #1.--Francisco Castro (talk) 03:17, 10 July 2008 (UTC)

Header format

Why are the header bit positions specified from the start of the IP header? This is ... curious, at best. —Preceding unsigned comment added by 64.81.244.229 (talk) 00:48, 6 May 2009 (UTC)

Move

The following discussion is an archived discussion of a requested move. Please do not modify it. Subsequent comments should be made in a new section on the talk page. No further edits should be made to this section.

The result of the move request was: Not moved, no consensus that this is the most common usage of the term. Taelus (talk) 13:43, 15 March 2010 (UTC)

---

Internet Control Message Protocol → ICMP — WP:COMMONNAME and this discussion. cf. HTML. —Justin (koavf)❤T☮C☺M☯ 21:55, 6 March 2010 (UTC)

• Oppose. I don't agree that WP:COMMONNAME applies here, International Commission on Missing Persons is just as common and it's known world-wide and to the general public, whereas Internet Control Message Protocol is only common to us Internet geeks. -- œ^™ 23:02, 6 March 2010 (UTC)

The above discussion is preserved as an archive of a requested move. Please do not modify it. Subsequent comments should be made in a new section on this talk page. No further edits should be made to this section.

Reliability

The article currently says "Each ICMP message is encapsulated directly within a single IP datagram, and thus, like UDP, ICMP is unreliable"; however, TCP is also encapsulated within IP and that doesn't make it unreliable. Needs more info. — Preceding unsigned comment added by 174.61.224.227 (talk) 22:06, 13 January 2012 (UTC)

Major merge

There is a family of articles associated with ICMP. I assert that one article covering all versions and functions of ICMP would best serve readers and have proposed merging all this material into this article. -—Kvng 01:09, 22 November 2012 (UTC)

I whole heartedly agree. All ICMP articles apart from the base one are short, and reference to it. --Dalibor Dragojevic (talk) 11:46, 27 November 2012 (UTC)

Support per Dalibor. 1exec1 (talk) 03:15, 6 December 2012 (UTC)

Hello, Thanks for this suggestion. I also support it. Regards. --nha, from Lyon, France. (talk) 18:34, 12 December 2012 (UTC)

Support, but when you merge them, notice that the ICMPv6 article improves understanding of the protocol by classifying messages into two categories: error messages and information messages. -- Dave Braunschweig (talk) 13:44, 17 December 2012 (UTC)

Oppose, the risk of confusion is too great. Electron9 (talk) 10:35, 13 January 2013 (UTC)

What kind of confusion are you talking about? -—Kvng 19:09, 13 January 2013 (UTC)

Mainly IPv4 and IPv6, ie what belongs to what. Electron9 (talk) 02:43, 14 January 2013 (UTC)

I started to look at the ICMPv6 merge and there does appear to be a problem here. They've renumbered code points in IGMPv6 making it a different protocol. -—Kvng 00:26, 16 January 2013 (UTC)

I've completed the easy merges. Plenty of additional cleanup to do. -—Kvng 22:08, 20 December 2012 (UTC)

Formatting cleanup completed. -—Kvng 19:22, 7 January 2013 (UTC)

I'm calling this one done. The ICMPv6 merge does not look like it will be helpful. ICMP Router Discovery Protocol is a separate protocol that makes use of ICMP. -—Kvng 15:19, 20 January 2013 (UTC)

TTL

It is not entirely true that "every device (such as an intermediate router) forwarding an IP datagram first decrements the time to live (TTL) field in the IP header by one." There are whole ranges of routers that don't touch TTL by default. — Preceding unsigned comment added by 37.128.6.247 (talk) 22:15, 30 March 2014 (UTC)

Such routers should be treated as malfunctioning; please see RFC 1812, section 5.3.1. — Dsimic (talk | contribs) 21:25, 31 March 2014 (UTC)

ICMP Exploits

I found this article about a man-in-the-middle attack called "DoubleDirect", which makes use of ICMP Redirect packets to modify routing tables on the victim host. This attack would force network traffic to flow via an arbitrary network path for a particular IP address.

I wanted to add this to the Redirect section, but this is currently just about the technical details. Which would be an appropriate section to place this?

The article I wanted to quote is at http://blog.zimperium.com/doubledirect-zimperium-discovers-full-duplex-icmp-redirect-attacks-in-the-wild/

invenio tc 01:11, 25 November 2014 (UTC)

On that note, I've just noticed that the Data section mentions an ICMP abuse. Should there be a completely new section Abuse or Exploits that detail possible scenarios?

Yes, WP:BEBOLD and add a new section. If another editor, comes up with a better way to incorporate the new cited information, they can make the improvement. ~KvnG 15:06, 27 November 2014 (UTC)

Black Nurse

Low bandwidth high impact DOS attack: http://arstechnica.com/security/2016/11/new-attack-reportedly-lets-1-modest-laptop-knock-big-servers-offline/ Hcobb (talk) 18:46, 14 November 2016 (UTC)

External links modified

Hello fellow Wikipedians,

I have just modified one external link on Internet Control Message Protocol. Please take a moment to review my edit. If you have any questions, or need the bot to ignore the links, or the page altogether, please visit this simple FaQ for additional information. I made the following changes:

• Added archive https://web.archive.org/web/20130102124241/http://www.cisco.com/en/US/docs/ios/12_3/ipaddr/command/reference/ip1_i2g.html to http://www.cisco.com/en/US/docs/ios/12_3/ipaddr/command/reference/ip1_i2g.html

When you have finished reviewing my changes, you may follow the instructions on the template below to fix any issues with the URLs.

This message was posted before February 2018. After February 2018, "External links modified" talk page sections are no longer generated or monitored by InternetArchiveBot. No special action is required regarding these talk page notices, other than regular verification using the archive tool instructions below. Editors have permission to delete these "External links modified" talk page sections if they want to de-clutter talk pages, but see the RfC before doing mass systematic removals. This message is updated dynamically through the template {{source check}} (last update: 5 June 2024).

• If you have discovered URLs which were erroneously considered dead by the bot, you can report them with this tool.
• If you found an error with any archives or the URLs themselves, you can fix them with this tool.

Cheers.—InternetArchiveBot (Report bug) 12:57, 15 November 2017 (UTC)

The FAQ about the port number of ICMP packet

Hello fellow Wikipedians,
I added the FAQ about the port number of ICMP packet, I think that it is commonly misunderstood, please feel free to edit the contents below on the article if necessary.

The Internet Control Message Protocol(ICMP) is one of the protocols in the Network layer(Layer 3). There is no TCP/UDP port number for ICMP packet as the TCP/UDP port are the part of the Transport layer(Layer 4). List of TCP and UDP port numbers is located to the Transport layer in the 7 layers of OSI model. Goodtiming1788 (talk) 04:40, 14 September 2018 (UTC)