Talk:Internet Control Message Protocol
![]() | Computing: Networking C‑class Low‑importance | ||||||||||||
|
![]() | The content of ICMP Source Quench was merged into Internet Control Message Protocol on 2012-12-20. The former page's history now serves to provide attribution for that content in the latter page, and it must not be deleted as long as the latter page exists. For the discussion at that location, see its talk page. |
![]() | The content of ICMP Redirect Message was merged into Internet Control Message Protocol on 2012-12-20. The former page's history now serves to provide attribution for that content in the latter page, and it must not be deleted as long as the latter page exists. For the discussion at that location, see its talk page. |
![]() | The content of ICMP Time Exceeded was merged into Internet Control Message Protocol on 2012-12-20. The former page's history now serves to provide attribution for that content in the latter page, and it must not be deleted as long as the latter page exists. For the discussion at that location, see its talk page. |
![]() | The content of ICMP Timestamp was merged into Internet Control Message Protocol on 2012-12-20. The former page's history now serves to provide attribution for that content in the latter page, and it must not be deleted as long as the latter page exists. For the discussion at that location, see its talk page. |
![]() | The content of ICMP Timestamp Reply was merged into Internet Control Message Protocol on 2012-12-20. The former page's history now serves to provide attribution for that content in the latter page, and it must not be deleted as long as the latter page exists. For the discussion at that location, see its talk page. |
![]() | The content of ICMP Address Mask Request was merged into Internet Control Message Protocol on 2012-12-20. The former page's history now serves to provide attribution for that content in the latter page, and it must not be deleted as long as the latter page exists. For the discussion at that location, see its talk page. |
![]() | The content of ICMP Address Mask Reply was merged into Internet Control Message Protocol on 2012-12-20. The former page's history now serves to provide attribution for that content in the latter page, and it must not be deleted as long as the latter page exists. For the discussion at that location, see its talk page. |
![]() | The content of ICMP Destination Unreachable was merged into Internet Control Message Protocol on 2012-12-20. The former page's history now serves to provide attribution for that content in the latter page, and it must not be deleted as long as the latter page exists. For the discussion at that location, see its talk page. |
Reliability
The article currently says "Each ICMP message is encapsulated directly within a single IP datagram, and thus, like UDP, ICMP is unreliable"; however, TCP is also encapsulated within IP and that doesn't make it unreliable. Needs more info. — Preceding unsigned comment added by 174.61.224.227 (talk) 22:06, 13 January 2012 (UTC)
Is it true that ICMP is a transport layer protocol?
In CISCO CCNA Curriculum materials is correct answer for question "At which layer of the OSI model does ICMP operate?" is network layer —Preceding unsigned comment added by 85.70.144.73 (talk) 17:52, 17 March 2008 (UTC)
- The lead section of the article recently accumulated some controversial statements on this subject, such as a rewrite of this old paragraph:
- ICMP differs in purpose from TCP and UDP in that it is not used to send and receive data between end systems. It is usually not used directly by user network applications, with some notable exceptions being the ping tool and traceroute.
- into this paragraph on 3 April 2008:
- From a strictly technical perspective, ICMP functions at the transport layer of IP. However, it differs in purpose from other transport protocols such as TCP and UDP in that it is typically not used to ::send and receive data between end systems. It is usually not used directly by user network applications, with some notable exceptions being the ping tool and traceroute. As such, ICMP is often ::considered to be a "network" layer protocol.
- and this additional final paragraph on 4 May 2008:
- ICMP can "never" be considered a Network Layer protocol. If it were to be considered so, then, it will have to rely on another transport layer protocol to carry its data i.e. Its data will become the payload for a transport layer protocol, as in the case of IP. ICMP is a Transport layer protocol just like TCP and UDP.
- A user deleted that contentious paragraph on 5 May 2008, promptly enough, but at the same time amplified the controversial conclusion:
- As such, ICMP is commonly (but incorrectly) considered to be a "network" layer protocol.
- Now it may be true that some analysts of how the Internet works after the fact have working definitions of "network layer" "Internet layer" and "transport layer" where ICMP fits in the "transport layer" and no other. However, ICMP was part of the Internet layer by definition, when it was built into the Internet. Understanding why it was in that layer would be part of understanding the historical development of the Internet. If what is commonly considered its "layer" has changed, that should be supported with some reference rather than argued originally, or worse, merely asserted.
- The company Network Sorcery provides an online guide to Internet protocols [1] that has a simple scheme for classifying protocols into layers that has apparently been favorably received by at least some technical writers and students. Network layer protocols have Ethertype numbers. Transport layer protocols have IP protocol numbers. Application layer protocols have port numbers. Unfortunately, that puts some protocols that have conventionally been considered in the network layer into the transport layer, including ICMP.
- According to information, the OSI model has seven layers, then a conventional explanation of the TCP/IP model in terms of five layers developed. Meanwhile, the article Internet protocol suite currently has a chart that provides a nuanced view of only four layers, and historical references to support that view. It puts ICMP in the top of three sublayers in the Internet layer.
- The difficulty that some have with this may be that "Internet layer" and "network layer" seem to be synonymous, yet what's in the "Internet layer" may be a matter of history and specific technical implementation, while what's in the "network layer" vs. in the "transport layer" may be a matter of classification according to information systems theory.
- --Sonny Moonie (talk) 09:58, 17 May 2008 (UTC)
- I think the important point is that the CCNA referes to the OSI modle, but here we refere to the TCP/IP-5-Layer Model. -- AssetBurned (talk) 16:29, 20 May 2008 (UTC)
- ICMP is one of the layer 3 Protocol Network layer. Not a transport layer protocol Goodtiming1788 (talk) 04:42, 14 September 2018 (UTC)
Creating single article with description of control messages
Rather than having a separate article for each control message I think it would be better to have a single article containing them all. List of ICMP control messages would be a suitable name. Comments? reetep 19:06, 31 May 2005 (UTC)
ICMP is a supporting protocol to IP, but in the protocol stack it's relative position is higher than IP as ICMP receives services from IP.
Ghost pings
Why, when a computer crashes so badly that all other I/O screeches to a halt, TCP applications stop working, etc, will some computers still respond to ICMP packets? What is it about the ICMP implementation of any given network stack or OS kernel that would make that happen?
Reply: ICMP, being a supporting protocol to TCP and UDP, is usually handled at a very low level in the TCP stack, possibly even inside the NIC. Most modern NIC's support some kind of TCP speedup by implementing part of the TCP stack inside hardware. Usually, some level of ethernet handling is even performed while the machine is off. —Preceding unsigned comment added by 194.171.50.224 (talk) 10:26, 26 June 2008 (UTC)
Transport layer control protocol
ICMP is part of the transport layer, but the Internet protocol suite sidebar lists it as being in the network layer.
== ICMP will normally run on port 135 ==.
What on earth is that about?
Reply: AFAIK, ICMP does not use ports really, because it runs only over IP and not over TCP or UDP that give port numbers. It gives information about ports, so if you're getting a lot of ICMP about port 135, maybe you're experiencing an attack there. --Sonny Moonie (talk) 10:54, 17 May 2008 (UTC)
- ICMP does not have any assigned port number. What it has is an protocol number, in fact, ICMP's got protocol #1.--Francisco Castro (talk) 03:17, 10 July 2008 (UTC)
ICMP above IP
I thought so as well, so why didn't anybody fix it before? fixed now.
Is this still fixed??? Just checked and ICMP is listed at the internet layer. Very confusing!!!
Bad packet structure
how come the source address and destination address in the packet structure table are only 16 bits long ? ips are 32 bits long. see also IP packet format
Color accessibility
In the table of the segment structure, the ICMP header is only labeled with color. The Wikipedia Accessibility guidelines do not recommend this since blind people cannot differentiate the important information. Please use text notes, bold, italics, or some other form of distinguishment. --65.11.180.160 05:48, 20 June 2007 (UTC)
ICMP segment structure ?
Echo and Timestamp request / reply (and some others) use identifier and sequence numbers. Other ICMP messages (such as Destination Unreachable) do not use them. I think the figure is wrong for illustrating ICMP as a whole. Rjgodoy (talk) 01:53, 28 February 2008 (UTC)
ICMP vs IP
IP is better !
Header format
Why are the header bit positions specified from the start of the IP header? This is ... curious, at best. —Preceding unsigned comment added by 64.81.244.229 (talk) 00:48, 6 May 2009 (UTC)
Move
- The following discussion is an archived discussion of a requested move. Please do not modify it. Subsequent comments should be made in a new section on the talk page. No further edits should be made to this section.
The result of the move request was: Not moved, no consensus that this is the most common usage of the term. Taelus (talk) 13:43, 15 March 2010 (UTC)
Internet Control Message Protocol → ICMP — WP:COMMONNAME and this discussion. cf. HTML. —Justin (koavf)❤T☮C☺M☯ 21:55, 6 March 2010 (UTC)
- Oppose. I don't agree that WP:COMMONNAME applies here, International Commission on Missing Persons is just as common and it's known world-wide and to the general public, whereas Internet Control Message Protocol is only common to us Internet geeks. -- Ϫ 23:02, 6 March 2010 (UTC)
- The above discussion is preserved as an archive of a requested move. Please do not modify it. Subsequent comments should be made in a new section on this talk page. No further edits should be made to this section.
Major merge
There is a family of articles associated with ICMP. I assert that one article covering all versions and functions of ICMP would best serve readers and have proposed merging all this material into this article. -—Kvng 01:09, 22 November 2012 (UTC)
- I whole heartedly agree. All ICMP articles apart from the base one are short, and reference to it. --Dalibor Dragojevic (talk) 11:46, 27 November 2012 (UTC)
- Support per Dalibor. 1exec1 (talk) 03:15, 6 December 2012 (UTC)
- Hello, Thanks for this suggestion. I also support it. Regards. --nha, from Lyon, France. (talk) 18:34, 12 December 2012 (UTC)
- Support, but when you merge them, notice that the ICMPv6 article improves understanding of the protocol by classifying messages into two categories: error messages and information messages. -- Dave Braunschweig (talk) 13:44, 17 December 2012 (UTC)
- Oppose, the risk of confusion is too great. Electron9 (talk) 10:35, 13 January 2013 (UTC)
- What kind of confusion are you talking about? -—Kvng 19:09, 13 January 2013 (UTC)
- Mainly IPv4 and IPv6, ie what belongs to what. Electron9 (talk) 02:43, 14 January 2013 (UTC)
- I started to look at the ICMPv6 merge and there does appear to be a problem here. They've renumbered code points in IGMPv6 making it a different protocol. -—Kvng 00:26, 16 January 2013 (UTC)
- Mainly IPv4 and IPv6, ie what belongs to what. Electron9 (talk) 02:43, 14 January 2013 (UTC)
- What kind of confusion are you talking about? -—Kvng 19:09, 13 January 2013 (UTC)
I've completed the easy merges. Plenty of additional cleanup to do. -—Kvng 22:08, 20 December 2012 (UTC)
Formatting cleanup completed. -—Kvng 19:22, 7 January 2013 (UTC)
I'm calling this one done. The ICMPv6 merge does not look like it will be helpful. ICMP Router Discovery Protocol is a separate protocol that makes use of ICMP. -—Kvng 15:19, 20 January 2013 (UTC)
TTL
It is not entirely true that "every device (such as an intermediate router) forwarding an IP datagram first decrements the time to live (TTL) field in the IP header by one." There are whole ranges of routers that don't touch TTL by default. — Preceding unsigned comment added by 37.128.6.247 (talk) 22:15, 30 March 2014 (UTC)
- Such routers should be treated as malfunctioning; please see RFC 1812, section 5.3.1. — Dsimic (talk | contribs) 21:25, 31 March 2014 (UTC)
ICMP Exploits
I found this article about a man-in-the-middle attack called "DoubleDirect", which makes use of ICMP Redirect packets to modify routing tables on the victim host. This attack would force network traffic to flow via an arbitrary network path for a particular IP address.
I wanted to add this to the Redirect section, but this is currently just about the technical details. Which would be an appropriate section to place this?
The article I wanted to quote is at http://blog.zimperium.com/doubledirect-zimperium-discovers-full-duplex-icmp-redirect-attacks-in-the-wild/
invenio tc 01:11, 25 November 2014 (UTC)
- On that note, I've just noticed that the Data section mentions an ICMP abuse. Should there be a completely new section Abuse or Exploits that detail possible scenarios?
- Yes, WP:BEBOLD and add a new section. If another editor, comes up with a better way to incorporate the new cited information, they can make the improvement. ~KvnG 15:06, 27 November 2014 (UTC)
Black Nurse
Low bandwidth high impact DOS attack: http://arstechnica.com/security/2016/11/new-attack-reportedly-lets-1-modest-laptop-knock-big-servers-offline/ Hcobb (talk) 18:46, 14 November 2016 (UTC)
External links modified
Hello fellow Wikipedians,
I have just modified one external link on Internet Control Message Protocol. Please take a moment to review my edit. If you have any questions, or need the bot to ignore the links, or the page altogether, please visit this simple FaQ for additional information. I made the following changes:
- Added archive https://web.archive.org/web/20130102124241/http://www.cisco.com/en/US/docs/ios/12_3/ipaddr/command/reference/ip1_i2g.html to http://www.cisco.com/en/US/docs/ios/12_3/ipaddr/command/reference/ip1_i2g.html
When you have finished reviewing my changes, you may follow the instructions on the template below to fix any issues with the URLs.
This message was posted before February 2018. After February 2018, "External links modified" talk page sections are no longer generated or monitored by InternetArchiveBot. No special action is required regarding these talk page notices, other than regular verification using the archive tool instructions below. Editors have permission to delete these "External links modified" talk page sections if they want to de-clutter talk pages, but see the RfC before doing mass systematic removals. This message is updated dynamically through the template {{source check}}
(last update: 5 June 2024).
- If you have discovered URLs which were erroneously considered dead by the bot, you can report them with this tool.
- If you found an error with any archives or the URLs themselves, you can fix them with this tool.
Cheers.—InternetArchiveBot (Report bug) 12:57, 15 November 2017 (UTC)
The FAQ about the port number of ICMP packet
Hello fellow Wikipedians,
I added the FAQ about the port number of ICMP packet, I think that it is commonly misunderstood, please feel free to edit the contents below on the article if necessary.
The Internet Control Message Protocol(ICMP) is one of the protocols in the Network layer(Layer 3). There is no TCP/UDP port number for ICMP packet as the TCP/UDP port are the part of the Transport layer(Layer 4). List of TCP and UDP port numbers is located to the Transport layer in the 7 layers of OSI model. Goodtiming1788 (talk) 04:40, 14 September 2018 (UTC)