ICMP tunneling commonly uses which ICMP message types to carry payload?

ICMP tunneling commonly uses which ICMP message types to carry payload?

• A. Echo Request and Echo Reply
• B. Time Exceeded
• C. Destination Unreachable
• D. Address Mask Request

Answer: (A)

ICMP tunneling relies on the ability to carry arbitrary data within ICMP messages. The Echo Request and Echo Reply types are purpose-built for ping and include a payload field that can hold any data. This makes them ideal for transporting arbitrary bytes back and forth between hosts, effectively creating a covert data channel that many networks still permit because ICMP Echo traffic is common. The other ICMP types shown are error or control messages. Time Exceeded and Destination Unreachable carry the original datagram and a small amount of payload, but they’re not designed for reliable, bidirectional data transfer, and they’re more likely to be filtered or flagged. Address Mask Request serves a specific network discovery purpose and isn’t meant for carrying large or arbitrary data. So, using Echo Request and Echo Reply provides the most straightforward, controllable way to embed and retrieve payload, which is why they are the best choice for ICMP tunneling.

ICMP tunneling relies on the ability to carry arbitrary data within ICMP messages. The Echo Request and Echo Reply types are purpose-built for ping and include a payload field that can hold any data. This makes them ideal for transporting arbitrary bytes back and forth between hosts, effectively creating a covert data channel that many networks still permit because ICMP Echo traffic is common.

The other ICMP types shown are error or control messages. Time Exceeded and Destination Unreachable carry the original datagram and a small amount of payload, but they’re not designed for reliable, bidirectional data transfer, and they’re more likely to be filtered or flagged. Address Mask Request serves a specific network discovery purpose and isn’t meant for carrying large or arbitrary data.

So, using Echo Request and Echo Reply provides the most straightforward, controllable way to embed and retrieve payload, which is why they are the best choice for ICMP tunneling.