Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal Journal of Computer Engineering: Progress, Application and Technology
Dewangga Javas Ganendra
Unknown Affiliation
Computer Science & IT

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
Payload-Based Identification of Covert Channels in ICMP Traffic Using Wireshark Dewangga Javas Ganendra; Aurellia Fira Artanti; Hesmi Aria Yanti; Rafly Firmansyah
CEPAT Journal of Computer Engineering: Progress, Application and Technology Vol 5 No 02 (2026): November 2026
Publisher : Universitas Telkom

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.25124/cepat.v5i02.11637

Abstract

The Internet Control Message Protocol (ICMP) is widely regarded as a diagnostic protocol through the ping mechanism, yet the flexibility of the ICMP payload field can be abused to establish a covert channel that hides data inside seemingly normal traffic. This study analyses and detects ICMP covert channels using payload inspection in Wireshark. The experiment was conducted on a controlled Windows host (192.168.18.17) with a gateway at 192.168.18.1, through three scenarios: a normal ping with a 32-byte payload as the baseline, a large ping (option -l 1000) with a 1000-byte payload as a covert-channel simulation, and a custom ICMP packet carrying a 17-byte plaintext marker generated with Scapy. Over nine labelled Echo Requests, the display filter icmp and data.len > 100 achieved a precision of 1.00, a recall of 0.80, and an F1 of 0.89, because the small Scapy packet bypassed the size threshold. Adding identifier and sequence-number anomalies and the readable string in the hex panel detected every covert packet (F1 = 1.00). The results show that payload inspection combining packet size, header behaviour, and content is an effective basis for detecting ICMP covert channels.
Co-Authors Aurellia Fira Artanti Hesmi Aria Yanti Rafly Firmansyah