ICMP Type 8 Code 0

According to IANA, the ICMP protocol type 8 ONLY has Code 0 (http://www.iana.org/assignments/icmp-parameters/icmp-parameters.xml#icmp-parameters-codes-8).

So if you saw something like below in ICMP traffic capture: Type 8 and Code 1, which normally means someone is/was Finger printing your host/network. One of the famous finger printing softwares sets the Code to 123 for Type 8 ICMP.

Screen Shot 2012-05-14 at 10_36_10 PM

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s