Got it

Router is sending unsolicited ICMP echo replies at regular intervals

Created: Jan 17, 2020 09:29:26Latest reply: Jan 17, 2020 09:35:16 555 1 1 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hi,

I have observed our NE20E sending unsolicited ICMP echo replies at regular intervals. The source and destination IP addresses are that of the router, but the destination MAC address is that of a connected device. Why is the router doing this? 

tcpdump:listening on eth2.99, link-type EN10MB (Ethernet), capture size 262144 bytes

17:16:40.26157634:1e:6b:1b:ca:ff > 00:1b:21:5f:2e:d3, ethertype IPv4 (0x0800), length 78:(tos 0xe0, ttl 2, id 0, offset 0, flags [none], proto ICMP (1), length 64)

   172.19.11.20 > 172.19.11.20: ICMPecho reply, id 65535, seq 0, length 44

17:16:41.26592034:1e:6b:1b:ca:ff > 00:1b:21:5f:2e:d3, ethertype IPv4 (0x0800), length 78:(tos 0xe0, ttl 2, id 0, offset 0, flags [none], proto ICMP (1), length 64)

   172.19.11.20 > 172.19.11.20: ICMPecho reply, id 65535, seq 0, length 44

17:16:42.26220934:1e:6b:1b:ca:ff > 00:1b:21:5f:2e:d3, ethertype IPv4 (0x0800), length 78:(tos 0xe0, ttl 2, id 0, offset 0, flags [none], proto ICMP (1), length 64)

   172.19.11.20 > 172.19.11.20: ICMPecho reply, id 65535, seq 0, length 44

17:16:43.27023934:1e:6b:1b:ca:ff > 00:1b:21:5f:2e:d3, ethertype IPv4 (0x0800), length 78:(tos 0xe0, ttl 2, id 0, offset 0, flags [none], proto ICMP (1), length 64)

   172.19.11.20 > 172.19.11.20: ICMPecho reply, id 65535, seq 0, length 44

17:16:44.26528434:1e:6b:1b:ca:ff > 00:1b:21:5f:2e:d3, ethertype IPv4 (0x0800), length 269:(tos 0xe0, ttl 2, id 0, offset 0, flags [none], proto ICMP (1), length 255)

   172.19.11.20 > 172.19.11.20: ICMPecho reply, id 65535, seq 0, length 235

 

HuaweiVersatile Routing Platform Software
VRP (R) software, Version 8.180 (NE20E V800R010C10SPC500)
Copyright (C) 2012-2018 Huawei Technologies Co., Ltd.
HUAWEI NE20E-S4 uptime is 198 days, 1 hour, 26 minutes 
Patch Version: V800R010SPH052


Thank you in advance.

Featured Answers
Popeye_Wang
Admin Created Jan 17, 2020 09:35:16

Hello Hobbit,

This is normal behavior. The ICMP packets from the router are used to:

1) Detect the packet loss on the link;

2) Detect if the ICMP packets are changed on the link or by the peer device.

You can disable the system ICMP packets functions by below commands:

1) "set said-node ping-trunk [ slot slot-id ] disable" if the interface is an Eth-Trunk.

2) "set said-node said-ping [ slot slot-id ] disable" if the interface is a normal physical interface.

However, we strongly recommend keeping the system ICMP packets enabled.

I hope this helps.


View more
  • x
  • convention:

All Answers

Hello Hobbit,

This is normal behavior. The ICMP packets from the router are used to:

1) Detect the packet loss on the link;

2) Detect if the ICMP packets are changed on the link or by the peer device.

You can disable the system ICMP packets functions by below commands:

1) "set said-node ping-trunk [ slot slot-id ] disable" if the interface is an Eth-Trunk.

2) "set said-node said-ping [ slot slot-id ] disable" if the interface is a normal physical interface.

However, we strongly recommend keeping the system ICMP packets enabled.

I hope this helps.


View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.