Protocol reference / ICMP

Read the signals inside ICMP traffic.

This Tping reference explains how Internet Control Message Protocol supports diagnostics, reports delivery problems, and communicates network conditions without carrying application data.

Review TCP/IP notes Tool overview

icmp-observe — sample

$ packet-tool --icmp --echo lab-target

[send ] type=8 code=0 seq=01
[recv ] type=0 code=0 seq=01
[recv ] ttl=61 rtt=14.2 ms

result echo reply received
scope: authorized test environment

Reference / 53

A control protocol for network feedback.

ICMP messages travel through IP networks to report reachability, routing conditions, and delivery errors. They are useful evidence, but a single reply does not describe every hop or guarantee application availability.

What ICMP does

ICMP is a network-layer companion to IP. Hosts and routers use it to return structured information about packet handling, including echo requests and replies commonly associated with connectivity checks.

Unlike TCP or UDP, ICMP does not use ports. Its messages are identified by a type and code, with additional fields defined by the particular message format.

Interpretation mattersA filtered, rate-limited, or absent ICMP response can reflect policy rather than a definite failure. Compare the result with routes, captures, and other authorized observations.

Message map

Common ICMPv4 messages.

Type and code values provide context for the event being reported. Names and behavior can differ between ICMP versions, so confirm the protocol family before drawing conclusions.

Type	Common name	Typical meaning	Diagnostic use
0	Echo Reply	Response to an echo request	Confirms a reply path when permitted
3	Destination Unreachable	Delivery failed or service is unavailable	Helps distinguish routing and filtering conditions
5	Redirect	A router suggests a different next hop	Review routing behavior and policy
8	Echo Request	Requests an echo response	Basic reachability and timing test
11	Time Exceeded	Hop limit expired in transit	Supports path discovery techniques

Practical method

Test the signal, not just the reply.

A responsible ICMP investigation narrows the question, keeps traffic proportionate, and records enough context to explain both positive and negative results.

Set the scope

Confirm ownership or written authorization, target boundaries, timing, and permitted message types.

Choose a baseline

Start with a small, ordinary request and document the expected route and response.

Compare evidence

Review replies alongside packet captures, hop information, local rules, and application behavior.

Record uncertainty

Separate observed facts from assumptions and note rate limits, filtering, and version differences.

FAQ

Questions before using ICMP.

Concise guidance for interpreting common diagnostic results.

Is ICMP the same as ping?

No. Ping utilities commonly use ICMP echo messages, while ICMP includes several message families for errors, routing information, and other network feedback.

Does an echo reply prove a service is working?

No. It shows that a particular ICMP exchange received a response. The destination application may still be unavailable, filtered, or listening on another interface.

Why might a reachable host not answer?

Firewalls, host policy, rate limiting, network devices, or asymmetric paths may block or suppress ICMP without preventing every other type of traffic.

What does Destination Unreachable mean?

It is a family of messages indicating that delivery could not proceed or that a requested service or port was unavailable. The code provides important additional detail.

Can ICMP testing affect a network?

Yes. Excessive or unusual traffic can trigger controls and consume resources. Use low rates, an approved target set, and an isolated lab whenever possible.

How should I report an ICMP documentation issue?

Contact Tping with the page, the relevant protocol version, and non-sensitive observations. Do not send credentials, private captures, or confidential network details.

Help improve the technical record.

Send corrections, compatibility observations, and documentation questions without including confidential network data.

Contact Tping