This is our old Q&A Site. Please post any new questions and answers at

I'm pinging my local desktop from a server (Solarwinds Log & Event Manager Virtual Appliance) and when I type "ICMP" into the display filter nothing shows up. However, when I do a " ==" in the display filter I start seeing syn + rst/ack packets.

alt text

Can anyone tell me why these aren't showing up as regular ICMP packets? When I get a colleague to ping my machine they show up ok, as ICMP, so I don't think it's a setting on my local host.

Server Address = PC Address = Capture taken from PC.

asked 03 Dec '12, 02:39

m0wax's gravatar image

accept rate: 0%

edited 03 Dec '12, 02:41

Looks like the server ping uses TCP SYN "scans" against the echo service instead of regular pings, but I can't say why. How did you ping from the server? Is it from command line, or an integrated server feature? Try using the ping command from the command line; these should show up as ICMP messages.

permanent link

answered 03 Dec '12, 03:01

Jasper's gravatar image

Jasper ♦♦
accept rate: 18%

I'm pinging my local desktop from a server (Solarwinds

@m0wax: Did you choose a monitoring method called echoping in the Solarwinds appliance? If so, the appliance is most certainly using the echoping tool and you get what you see.

(03 Dec '12, 04:15) Kurt Knochner ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 03 Dec '12, 02:39

question was seen: 3,806 times

last updated: 03 Dec '12, 04:15

p​o​w​e​r​e​d by O​S​Q​A