ICMP

Purpose and Packet Structure

ICMP (Internet Control Message Protocol) is a network-layer protocol used by routers and hosts to send error messages and operational information about IP packet delivery. Unlike TCPTransmission Control Protocol. A reliable, connection-oriented transport protocol that guarantees ordered, error-checked delivery of data through three-way handshakes, acknowledgments, and retransmission. The foundation of HTTP, SSH, and most internet services. or UDPUser Datagram Protocol. A connectionless transport protocol that sends datagrams without establishing a connection or guaranteeing delivery. Faster than TCP, it is preferred for real-time applications like DNS queries, VoIP, gaming, and streaming., ICMP is not used to carry application data — it exists entirely to report network conditions back to the sender. Common ICMP message types include Echo Request/Reply (used by ping), Destination Unreachable, Time Exceeded, and Redirect.

How Ping and Traceroute Use ICMP

The ping command sends ICMP Echo Request packets to a target host and measures the round-trip time of the ICMP Echo Reply. This is the simplest test for basic LatencyThe time delay for a data packet to travel from source to destination, typically measured in milliseconds (ms). Lower latency is critical for real-time applications like video calls, gaming, and financial trading. and reachability. The traceroute command exploits ICMP Time Exceeded messages: it sends packets with progressively increasing TTL (Time to Live)A field in an IP packet header that limits the packet's lifespan by specifying the maximum number of hops it can traverse. Each router decrements the TTL by one; when it reaches zero, the packet is discarded to prevent routing loops. values, causing each router along the path to discard the packet and send back a Time Exceeded message, revealing the path hop by hop. Use Ping Test to measure round-trip times to any host.

ICMP and Firewalls

Many firewalls block ICMP traffic by default, which can make troubleshooting difficult. A host that blocks ICMP Echo Requests will not respond to ping even if it is fully operational and serving application traffic normally. ICMP fragmentation messages are also critical for Path MTU Discovery — blocking them can cause silent Packet LossThe percentage of data packets that fail to reach their destination, typically caused by network congestion, faulty hardware, or wireless interference. Even 1-2% packet loss can noticeably degrade voice and video quality. when packets exceed the MTU of an intermediate link, a problem that is notoriously hard to diagnose.