icmpinfo - interpret ICMP messages
icmpinfo [-v[v[v]]] [-n] [-p] [-s] [-l]
Icmpinfo is a tool for looking at the ICMP messages received on the
running host. It can be used to detect and record 'bombs' as well as
various network problems.
The output format is as follows (all on one line):
MMM DD HH:MM:SS ICMP_type[sub-type]
< sender_ip [sender_name] > unreach_ip [unreach_name]
sp=source_port dp=dest_port seq=sequence sz=packet_size
In normal operation, icmpinfo will only report on "weird" packets,
- Give information about all icmp packets, excepts pings.
- Give about pings too (i.e. icmp_echo_reply).
- Include an ascii/hex dump of each packet
- Avoid name queries - just give IP addresses. Use this
option when icmpinfo is left unattended on an host also running a name server,
to avoid possible loops.
- Avoid port number to service name decoding.
- Show the interface ip that received the packet.
Usefull only if your host has several network interfaces. In this case
an '- my_ip [my_name]' is added between the sender and unreach ip and
- Forks and use the syslog(3) facility to record events (recomended use). root id is checked.
The packet decoding is only fully meaningful for ICMP Unreachable warnings.
Free software. See LICENSE in package.
Latest version is available via
Thanx to Vesa
for help in debugging buggy bsd code!
To Dave for providing the first man page!
And to ScottM
for making my english readable!