🧪 Wireshark Lab – ICMP Protocol Analysis (Day #7)

🎯 Objective

This lab introduces the analysis of ICMP packets using Wireshark. It covers how to identify echo requests/replies, apply ICMP-related filters, and interpret important packet fields.

🛠️ Lab Setup

Component	Description
OS	Windows 10/11, Linux, or macOS
Tool	Wireshark (latest version)
File	sample-capture.pcapng (optional)

📘 Key Concepts

• ICMP Types:

  • Echo Request: Type 8
  • Echo Reply: Type 0

• Packet Fields:
  Type, Code, Checksum, Identifier, Sequence Number, Data

🔍 Filters Used

icmp                     # All ICMP traffic  
icmp.type == 8           # Echo Requests  
icmp.type == 0           # Echo Replies  
icmp.code == 3           # Destination unreachable  
ip.addr == 192.168.1.10  # Host-specific filter

📸 Screenshots

📂 Located in the /images/ folder | |

🧠 Observations

See ➡️ Click to view observations.md

📁 Project Structure

icmp-wireshark-lab/
├── README.md
├── sample-capture.pcapng
├── images/
├── notes/
├── filters/
└── .gitignore

✅ Conclusion

• ICMP is essential for network troubleshooting and diagnostics.
• Wireshark provides a visual way to investigate ICMP-based traffic.
• Helps identify ping sweeps, scan activity, and unreachable systems.