ICMP Flashcards
(7 cards)
What does ICMP?
Provides Feedback about issues related to the processing of IP Packets under certain conditions
For what can ICMP be abused?
Recon, thus it’s blocked in some networks
Commands which use ICMP
*Ping
*Traceroute (–> ping with special TTL)
Why does sometimes the first ping request fail?
Cause it’s not in the ARP Table yet and the first request times out while the ip is resolved.
Ping failed = Host not available?
No, ICMP can be blocked and thus ping fails
ICMPv4 and ICMPv6 messages (not all)
*Host reachability (ICMP Echo Request)
*Destination or Service Unreachable
*Time exceeded (TTL)
ICMPv6 Messages
*Router Solicitation (RS)
*Router Advertisement (RA)
*Neighbor Solicitation (NS) used for DAD
*Neighbor Advertisement (NA) –> ARP for IPv6