Classify ICMP Messages

ICMP (Internet Control Message Protocol) provides message packets to report errors and other information relevant to IP packet processing. PacketWise can classify ICMP traffic based on the message type. For example, the UNIX ping command generates ICMP echo request packets and listens for the subsequent ICMP echo response packets. To identify ping traffic passing through the unit, you can create an ICMP class and specify echo as the message type.

Note: To perform this task from PolicyCenter, you must first select a configuration from the Editing Configuration drop-down list at the top of the page.

To create a class based on a type of ICMP message:

1. Click the manage tab.

2. In the left window pane, select the class or folder that will be the parent of the class you are about to define.

3. Click class and select add.

4. In the Name field, type a descriptive name (up to 31 characters; hyphens, underscores, and periods are acceptable).

5. For the Service, select ICMP.

6. Scroll down to the bottom of the page and make sure ICMP Type appears in the Criterion field.  show screen

7. Type one of the following message type in the empty text field:

• echo
• dest_unreachable
• quench
• redirect
• time_exceeded
• param_prob
• timestamp
• info
• address_mask
• nachi

8. Click add class.

For more information about the other entries in the New Traffic Class window, see Matching Rules.

Note: A matching rule can contain only one application-specific criterion. To combine multiple criteria, use two traffic classes, a parent and a child.