ICMP header options

Use these options to check the ICMP header:

icmp_type

Specify the ICMP type to match. Covers both ICMPv4 and ICMPv6.

Syntax:

--icmp_type <number>;

icmp_code

Specify the ICMP code to match. Covers both ICMPv4 and ICMPv6.

Syntax:

--icmp_code <number>;

icmp_id

Check for the specified ICMP ID value. This keyword is only used for packets with ICMP type ECHO_REQUEST or ECHO_REPLY.

Syntax:

--icmp_id <number>;

icmp_seq

Check for the specified ICMP sequence value. This keyword is only used for packets with ICMP type ECHO_REQUEST or ECHO_REPLY.

Syntax:

--icmp_seq <number>;

icmp.code, icmp.type, icmp.checksum

Check these fields in ICMPv4 header.

Syntax:

--icmp.[decorations] <operator> <value>;

Valid operators: =, !=, >=, <=, &, |, ^, and in.

Example:

--icmp.code in [1,2];

icmp [offset]

Access any fields in ICMPv4 header in a freelance mode.

Syntax:

--icmp[offset] <operator> <value> [, word size] [, endianness];

Both word size and endianness are optional. By default, the engine uses BYTE and big endian.

Valid operators: =, !=, >=, <=, &, |, ^, and in.

Example:

--icmp[1] in [1,2];

icmp6.code, icmp6.type, icmp6.checksum

Check these fields in ICMPv6 header.

Syntax:

--icmp6.[decorations] <operator> <value>;

Valid operators: =, !=, >=, <=, &, |, ^, and in.

icmp6 [offset]

Access any fields in ICMPv6 header in a freelance mode.

Syntax:

--icmp6[offset] <operator> <value> [, word size] [, endianness];

Both word size and endianness are optional. By default, the engine uses BYTE and big endian.

Valid operators: =, !=, >=, <=, &, |, ^, and in.

Example:

--icmp6[0] = 135;