How to Find out Which Process is Issuing ICMP Requests

If your network admin complains that your computer is flooding the network with icmp requests, and if you are not aware of any program that need to do this, you should pay attention and find out what's going on.

To see a statistic report on your computer's icmp activities:

root# netstat -sp

This displays summary statistics for each protocol. Look under the section "Icmp:" for icmp related statistics report.

To see icmp traffic on your computer:

root# tcpdump icmp

If the tcpdump report shows a request to a domain name, you can find out the ip of the domain name using either "host <domainname>" or "nslookup <domainname>".

Upon finding out the IP of the icmp destination, then you can us lsof to find out the process that issues the icmp request:

root# lsof -i@1.2.3.4