GEN:SID 1:384
Message ICMP PING
Summary This event is generated when an generic ICMP echo request is made.
Impact Information gathering.  An ICMP echo request can determine if a host is active.
Detailed Information An ICMP echo request is used by the ping command to elicit an ICMP echo reply from a listening live host.  This rule alerts on a generic ICMP request where no payload is included in the message or the payload does not match more specific rules.
Affected Systems All
Attack Scenarios An attacker may attempt to determine live hosts in a network prior to launching an attack.
Ease of Attack Simple
Corrective Action Block inbound ICMP echo requests.
Additional References