ICMP

ICMP carries diagnostic and error messages between network devices, powering tools like ping and traceroute. It sits alongside IP as core plumbing of the internet. Attackers abuse it for network mapping, denial-of-service floods, and covert data tunnels, so many firewalls restrict which ICMP types they allow.