ICMP and ping/traceroute in Computer Networks - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does ICMP stand for and what is its main purpose?

ICMP stands for Internet Control Message Protocol. Its main purpose is to send error messages and operational information indicating success or failure when communicating with another IP address.

beginner

What is the function of the ping command?

The ping command uses ICMP to check if a device on a network is reachable. It sends a small message called an 'echo request' and waits for an 'echo reply' to confirm the device is online.

intermediate

How does traceroute help in network troubleshooting?

Traceroute shows the path data takes from your computer to a destination by sending packets with increasing 'time to live' (TTL) values. It helps identify where delays or failures occur along the route.

beginner

What type of ICMP message does ping send and expect to receive?

Ping sends an ICMP Echo Request message and expects to receive an ICMP Echo Reply message in response.

intermediate

Why might a traceroute show an asterisk (*) instead of a response?

An asterisk (*) means the request timed out. This can happen if a router along the path does not send back an ICMP Time Exceeded message, often due to firewall rules or network policies blocking ICMP.

What protocol does the ping command use to check connectivity?

A ICMP

B TCP

C UDP

D HTTP

Ping uses ICMP (Internet Control Message Protocol) to send echo requests and receive echo replies.

What does traceroute primarily measure?

A The number of devices connected to your network

B The bandwidth of your internet connection

C The IP address of your device

D The path and delay between your device and a destination

Traceroute shows the path packets take and the delay at each step to help diagnose network issues.

What does an ICMP Echo Reply indicate?

A The destination device is offline

B The destination device is reachable

C The packet was lost

D The network is congested

An ICMP Echo Reply means the device responded, confirming it is reachable.

Why might a ping fail even if the device is online?

A The device has no IP address

B The device is turned off

C ICMP packets are blocked by a firewall

D The network cable is unplugged

Firewalls can block ICMP packets, causing ping to fail even if the device is online.

What does the 'time to live' (TTL) value do in traceroute?

A Limits how many hops a packet can take before being discarded

B Measures the speed of the network

C Identifies the destination IP address

D Encrypts the packet data

TTL limits the number of hops a packet can travel; traceroute uses this to discover each step along the path.

Explain how the ping command works and what information it provides about a network.

Think about sending a message and waiting for a reply to check if a device is online.

Describe the purpose of traceroute and how it helps identify network problems.

Consider how traceroute shows each step data takes to reach a destination.

Practice

1. What is the primary purpose of the ICMP protocol in computer networks?

easy

A. To check the status of network connections and report errors

B. To encrypt data for secure communication

C. To assign IP addresses to devices automatically

D. To transfer files between computers

Solution

1. Step 1: Understand ICMP's role

   ICMP is used by devices to send messages about network status and errors.

2. Step 2: Compare options with ICMP functions

   Only To check the status of network connections and report errors matches ICMP's role of checking connections and reporting errors.

3. Final Answer:

   To check the status of network connections and report errors -> Option A

4. Quick Check:

   ICMP = Network status and error messages [OK]

Hint: ICMP is for network messages, not data transfer or encryption [OK]

Common Mistakes:

• Confusing ICMP with protocols for encryption or file transfer
• Thinking ICMP assigns IP addresses
• Assuming ICMP handles data encryption

2. Which of the following is the correct command syntax to send 4 ICMP echo requests using ping on most systems?

easy

A. ping -n 4 example.com

B. ping -c 4 example.com

C. ping /4 example.com

D. ping -t 4 example.com

Solution

1. Step 1: Identify common ping options

   On Unix/Linux systems, '-c' specifies the count of echo requests.

2. Step 2: Match option with correct syntax

   ping -c 4 example.com uses '-c 4' which is the standard way to send 4 requests on most systems.

3. Final Answer:

   ping -c 4 example.com -> Option B

4. Quick Check:

   Unix ping count option = -c [OK]

Hint: Use '-c' for count on Unix/Linux ping commands [OK]

Common Mistakes:

• Using '-n' which is Windows-specific, not Unix/Linux
• Confusing '-t' which sets TTL, not count
• Using incorrect slash syntax like '/4'

3. Consider this traceroute output snippet showing hops to a destination:

1  192.168.1.1  1 ms  1 ms  1 ms
2  10.0.0.1  5 ms  5 ms  5 ms
3  * * *
4  203.0.113.5  20 ms  20 ms  20 ms

What does the asterisk (*) on hop 3 indicate?

medium

A. The router at hop 3 did not respond to the ICMP request

B. The destination was reached at hop 3

C. The traceroute command failed completely

D. The packet was lost before reaching hop 3

Solution

1. Step 1: Understand traceroute asterisks

   Asterisks mean no reply was received from that hop within timeout.

2. Step 2: Interpret hop 3 asterisks

   Hop 3's router likely blocked or did not respond to ICMP, but traceroute continued.

3. Final Answer:

   The router at hop 3 did not respond to the ICMP request -> Option A

4. Quick Check:

   Asterisk = No ICMP reply from hop [OK]

Hint: Asterisk means no reply, not necessarily failure [OK]

Common Mistakes:

• Assuming asterisk means destination reached
• Thinking traceroute failed completely
• Believing packet was lost before hop 3

4. You run the command ping -c 3 8.8.8.8 but get the error: "ping: unknown option -c". What is the most likely cause?

medium

A. The IP address 8.8.8.8 is invalid

B. The ping command requires root privileges

C. You are using Windows where '-c' is not a valid option

D. The network cable is unplugged

Solution

1. Step 1: Identify OS-specific ping options

   Windows ping uses '-n' for count, not '-c'.

2. Step 2: Match error with option misuse

   Error shows '-c' is unknown, indicating Windows environment.

3. Final Answer:

   You are using Windows where '-c' is not a valid option -> Option C

4. Quick Check:

   Windows ping count option = -n, not -c [OK]

Hint: Use '-n' on Windows, '-c' on Unix/Linux for ping count [OK]

Common Mistakes:

• Blaming invalid IP address for option error
• Assuming root privileges are needed for ping
• Thinking physical connection causes option error

5. You want to find the exact path packets take from your computer to a website but notice some hops show '*' in traceroute output. Which approach best helps you confirm the full path?

hard

A. Use a VPN to hide your IP and avoid hops with '*'

B. Switch to using ping since it shows all hops clearly

C. Disable your firewall to allow all ICMP packets through

D. Use the traceroute command with increased timeout and try multiple attempts

Solution

1. Step 1: Understand why hops show '*'

   Some routers block ICMP or respond slowly, causing timeouts.

2. Step 2: Use traceroute options to improve results

   Increasing timeout and repeating traceroute can get replies from slow or filtered hops.

3. Step 3: Evaluate other options

   Ping does not show path; disabling firewall risks security; VPN changes path, not reveals it.

4. Final Answer:

   Use the traceroute command with increased timeout and try multiple attempts -> Option D

5. Quick Check:

   Traceroute with retries = better path info [OK]

Hint: Increase traceroute timeout and retry to reveal filtered hops [OK]

Common Mistakes:

• Using ping to trace path instead of traceroute
• Disabling firewall without understanding risks
• Using VPN to avoid hops instead of revealing them