Lab 10 ICMP
Lab 10 ICMP
Lab 10 ICMP
(EL-2007)
LABORATORY MANUAL
Fall 2024
(LAB# 10)
ICMP
Dr. Aamer Hafeez
Date: _____________________
Objective
Understand the working of the ICMP protocol
ICMP header
An ICMP message has an 8-byte header and a variable-size data section. Although the general
format of the header is different for each message type, the first 4 bytes are common to all.
The echo-request and echo-reply messages are designed for diagnostic purposes. Network
managers and users utilize this pair of messages to identify network problems. The combination
of echo-request and echo-reply messages determines whether two systems (hosts or routers) can
communicate with each other.
A host or router can send an echo-request message to another host or router. The host or router
that receives an echo-request message creates an echo-reply message and returns it to the original
sender.
Task01: Ping two computers, and use Wireshark to capture the ICMP request n reply packets.
Select any request and its reply packet, and write down its header contents.
Whenever a router decrements a datagram with a time-to-live value to zero, it discards the
datagram and sends a time-exceeded message to the original source. Such Error message fills the
payload of the ICMP with the discarded packet, for which this error message is being generated.
Task02: Create or use an existing network in packet tracer with more than 2 routers, and send a
complex PDU with a TTL small enough resulting in the Time exceeded error message. Take
screenshots of such scenario along with the packet contents.
tracert command
tracert command employs this technique of TTL to disover the routers in a route.
Tracert sends a series of ICMP echo requests, and the request’s TTL increased by 1 each time.
This allows the utility to display the routers through which packets are passing to be identified
To see the time exceeded messages, we can run the wireshark, and then use the trace route
command to see the route of a packet from the source to the destination.
Task04: Check out the contents of a time exceed message, especially the payload of icmp header