2.3 KiB
| title |
|---|
| ICMP Header |
ICMP Header Format
Below is the Internet Control Message Protocol (ICMP) header format for IPv4 according to RFC792:
ICMP for IPv4 is encapsulated within an IPv4 packet and contains a data section that includes a copy of the entire IPv4 header along with at least the first 64 bits (8 bytes) of the original datagram's data. The additional 8 bytes of data is used by the receiving host to match the message to an internal process. IP-in-IP tunneling (encapsulating an IP packet within another IP header), adds additional bytes in the form of the added IPv4 header(s) and may require additional bytes are included in the data portion of the ICMP packet to allow the host to identify the associated process [RFC1812].
ICMP packets for IPv4 may not exceed 576 bytes in length, including headers.
Network Address Translation [NAT]
- During traffic flow, packets are sent out in order to remap an IP address to modify to another address. This process only works with IPv4. Lastly, this is process ensures that IPv4 addresses will not run out by IP modification on a normal basis.
Type [8-bits]
- Type field refers to the type of ICMP message
- Some useful ICMP types include:
8- Echo Request0- Echo Reply3- Destination Unreachable5- Redirect Message
Code [8-bits]
- Code field provides additional details for the ICMP message
- Example Codes for Type 3 Destination Unreachable Requests:
0- Net Unreachable1- Host Unreachable2- Protocol Unreachable3- Port Unreachable
Checksum [16-bits]
- Calculated from the ICMP header and data as an error detection mechanism to determine if data was changed in transit.
- The checksum is the 16-bit one's complement of the one's complement sum of the ICMP message starting with the Type field. [RFC792]