← Back to Attack / Defense Lab
OSI LAYER 3 // Network Layer

ICMP Flood

An ICMP flood sends excessive ICMP traffic that consumes bandwidth or processing resources.

01 // HOW IT WORKS

Mechanism

The service or network spends resources receiving and processing more ICMP messages than normal.

02 // DETECTION

Indicators to watch

ICMP packet-rate spikes, bandwidth consumption, elevated device CPU, and changes in echo request/reply ratios.

03 // ATTACK FLOW

Concept diagram

01ICMP senders↓
02High ICMP rate↓
03Link / CPU pressure↓
04Availability impact↓
05ICMP rate controls
04 // PREVENTION

Defensive controls

Rate-limit ICMP where appropriate, filter unnecessary traffic, use upstream DDoS controls, and maintain baseline telemetry.

05 // SECURITY TOOL

Recommended security control

Firewall / flow monitoring

Use controlled lab traffic only.

06 // DEFENCE PRACTICE LAB

Defence practice lab

The administrator has not attached a tool link yet. This slot will show “Build Soon” until an external link is configured.

Build Soon
◈
DEFENCE PRACTICE LAB // BUILD SOONThe administrator can add or edit an external defence practice lab link from the private admin portal.
07 // DEFENCE TECHNIQUES

Defence techniques

Defence techniques for this attack will be added by the administrator.

AUTHORIZED LEARNING

All attack descriptions are for defensive education. Test scanning, traffic generation, interception, wireless testing, and vulnerable applications only on systems and networks you own or are explicitly authorized to assess.