Display Filter Reference: Internet Control Message Protocol

Protocol field name: icmp

Versions: 1.0.0 to 2.6.1

Back to Display Filter Reference

Field name Description Type Versions
icmp.addr_entry_size Address entry size Unsigned integer, 1 byte 2.0.0 to 2.6.1
icmp.address_mask Address Mask IPv4 address 2.0.0 to 2.6.1
icmp.checksum Checksum Unsigned integer, 2 bytes 1.0.0 to 2.6.1
icmp.checksum.status Checksum Status Unsigned integer, 1 byte 2.2.0 to 2.6.1
icmp.checksum_bad Bad checksum Label 1.0.0 to 2.0.16, 2.4.0 to 2.6.1
icmp.checksum_bad.expert Expert Info Label 2.0.0 to 2.2.15
icmp.code Code Unsigned integer, 1 byte 1.0.0 to 2.6.1
icmp.data_time Timestamp from icmp data Date and time 1.8.0 to 2.6.1
icmp.data_time_relative Timestamp from icmp data (relative) Time offset 1.8.0 to 2.6.1
icmp.ext ICMP Extensions Label 1.8.0 to 2.6.1
icmp.ext.checksum Checksum Unsigned integer, 2 bytes 1.8.0 to 2.6.1
icmp.ext.checksum.status Checksum Status Unsigned integer, 1 byte 2.2.0 to 2.6.1
icmp.ext.checksum_bad Bad checksum Label 1.8.0 to 2.0.16, 2.4.0 to 2.6.1
icmp.ext.class Class Unsigned integer, 1 byte 1.8.0 to 2.6.1
icmp.ext.ctype C-Type Unsigned integer, 1 byte 1.8.0 to 2.6.1
icmp.ext.data Data Sequence of bytes 2.0.0 to 2.6.1
icmp.ext.length Length Unsigned integer, 2 bytes 1.8.0 to 2.6.1
icmp.ext.res Reserved Unsigned integer, 2 bytes 1.8.0 to 2.6.1
icmp.ext.version Version Unsigned integer, 1 byte 1.8.0 to 2.6.1
icmp.ident Identifier (BE) Unsigned integer, 2 bytes 1.0.0 to 2.6.1
icmp.int_info.afi Address Family Identifier Unsigned integer, 2 bytes 1.8.0 to 2.6.1
icmp.int_info.ifindex ifIndex Boolean 1.8.0 to 2.6.1
icmp.int_info.index Interface Index Unsigned integer, 4 bytes 2.0.0 to 2.6.1
icmp.int_info.ip Source IPv4 address 1.8.0
icmp.int_info.ipaddr IP Address Boolean 1.8.0 to 2.6.1
icmp.int_info.ipunknown Source Sequence of bytes 2.0.0 to 2.6.1
icmp.int_info.ipv4 Source IPv4 address 1.8.1 to 2.6.1
icmp.int_info.ipv6 Source IPv6 address 1.8.1 to 2.6.1
icmp.int_info.mtu MTU Boolean 1.8.0 to 2.6.1
icmp.int_info.name Name Character string 1.8.0 to 2.6.1
icmp.int_info.name_length Name Length Unsigned integer, 1 byte 2.0.0 to 2.6.1
icmp.int_info.name_present Interface Name Boolean 2.2.0 to 2.6.1
icmp.int_info.reserved Reserved Unsigned integer, 1 byte 1.8.0 to 2.6.1
icmp.int_info.role Interface Role Unsigned integer, 1 byte 1.8.0 to 2.6.1
icmp.length Length Unsigned integer, 1 byte 1.8.0 to 2.6.1
icmp.length.original_datagram Length of original datagram Unsigned integer, 1 byte 2.0.0 to 2.6.1
icmp.lifetime Lifetime Unsigned integer, 2 bytes 2.0.0 to 2.6.1
icmp.mip.b Busy Boolean 1.0.0 to 2.6.1
icmp.mip.challenge Challenge Sequence of bytes 1.0.0 to 2.6.1
icmp.mip.coa Care-Of-Address IPv4 address 1.0.0 to 2.6.1
icmp.mip.content Content Sequence of bytes 2.0.0 to 2.6.1
icmp.mip.f Foreign Agent Boolean 1.0.0 to 2.6.1
icmp.mip.flags Flags Unsigned integer, 2 bytes 1.0.0 to 2.6.1
icmp.mip.g GRE Boolean 1.0.0 to 2.6.1
icmp.mip.h Home Agent Boolean 1.0.0 to 2.6.1
icmp.mip.length Length Unsigned integer, 1 byte 1.0.0 to 2.6.1
icmp.mip.life Registration Lifetime Unsigned integer, 2 bytes 1.0.0 to 2.6.1
icmp.mip.m Minimal Encapsulation Boolean 1.0.0 to 2.6.1
icmp.mip.prefixlength Prefix Length Unsigned integer, 1 byte 1.0.0 to 2.6.1
icmp.mip.r Registration Required Boolean 1.0.0 to 2.6.1
icmp.mip.reserved Reserved Unsigned integer, 2 bytes 1.0.0 to 2.6.1
icmp.mip.rt Reverse tunneling Boolean 1.0.0 to 2.6.1
icmp.mip.seq Sequence Number Unsigned integer, 2 bytes 1.0.0 to 2.6.1
icmp.mip.type Extension Type Unsigned integer, 1 byte 1.0.0 to 2.6.1
icmp.mip.u UDP tunneling Boolean 1.0.0 to 2.6.1
icmp.mip.v VJ Comp Boolean 1.0.0 to 2.6.1
icmp.mip.x Revocation support Boolean 1.0.0 to 2.6.1
icmp.mpls ICMP Extensions for MPLS Label 1.0.0 to 1.6.16
icmp.mpls.checksum Checksum Unsigned integer, 2 bytes 1.0.0 to 1.6.16
icmp.mpls.checksum_bad Bad Checksum Boolean 1.0.0 to 1.6.16
icmp.mpls.class Class Unsigned integer, 1 byte 1.0.0 to 1.6.16
icmp.mpls.ctype C-Type Unsigned integer, 1 byte 1.0.0 to 1.6.16
icmp.mpls.data Data Sequence of bytes 2.0.0 to 2.6.1
icmp.mpls.exp Experimental Unsigned integer, 3 bytes 1.0.0 to 2.6.1
icmp.mpls.label Label Unsigned integer, 3 bytes 1.0.0 to 2.6.1
icmp.mpls.length Length Unsigned integer, 2 bytes 1.0.0 to 1.6.16
icmp.mpls.res Reserved Unsigned integer, 2 bytes 1.0.0 to 1.6.16
icmp.mpls.s Stack bit Boolean 1.0.0 to 2.6.1
icmp.mpls.ttl Time to live Unsigned integer, 1 byte 1.0.0 to 2.6.1
icmp.mpls.version Version Unsigned integer, 1 byte 1.0.0 to 1.6.16
icmp.mtu MTU of next hop Unsigned integer, 2 bytes 1.0.0 to 2.6.1
icmp.no_resp No response seen Label 1.12.0 to 2.6.1
icmp.num_addrs Number of addresses Unsigned integer, 1 byte 2.0.0 to 2.6.1
icmp.originate_timestamp Originate timestamp Unsigned integer, 4 bytes 2.0.0 to 2.6.1
icmp.pointer Pointer Unsigned integer, 4 bytes 2.0.0 to 2.6.1
icmp.pref_level Preference level Signed integer, 4 bytes 2.0.0 to 2.6.1
icmp.receive_timestamp Receive timestamp Unsigned integer, 4 bytes 2.0.0 to 2.6.1
icmp.redir_gw Gateway address IPv4 address 1.0.0 to 2.6.1
icmp.reserved Reserved Sequence of bytes 2.0.0 to 2.6.1
icmp.resp_in Response frame Frame number 1.6.0 to 2.6.1
icmp.resp_not_found Response not found Label 1.12.0 to 2.6.1
icmp.resp_to Request frame Frame number 1.6.0 to 2.6.1
icmp.resptime Response time Floating point (double-precision) 1.6.0 to 2.6.1
icmp.router_address Router address IPv4 address 2.0.0 to 2.6.1
icmp.seq Sequence number (BE) Unsigned integer, 2 bytes 1.0.0 to 2.6.1
icmp.seq_le Sequence number (LE) Unsigned integer, 2 bytes 1.4.0 to 2.6.1
icmp.transmit_timestamp Transmit timestamp Unsigned integer, 4 bytes 2.0.0 to 2.6.1
icmp.type Type Unsigned integer, 1 byte 1.0.0 to 2.6.1
icmp.unused Unused Sequence of bytes 2.0.0 to 2.6.1
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More