﻿---
title: Capture ICMP traffic
description: The icmp section of the packetbeat.yml config file specifies options for the ICMP protocol. Here is a sample configuration section for ICMP: Also see...
url: https://docs-v3-preview.elastic.dev/elastic/beats/pull/48504/reference/packetbeat/packetbeat-icmp-options
applies_to:
  - Elastic Stack: Generally available in 9.0+
---

# Capture ICMP traffic
The `icmp` section of the `packetbeat.yml` config file specifies options for the ICMP protocol. Here is a sample configuration section for ICMP:
```yaml
packetbeat.protocols:

- type: icmp
  enabled: true
```


## Configuration options

Also see [Common protocol options](https://docs-v3-preview.elastic.dev/elastic/beats/pull/48504/reference/packetbeat/common-protocol-options).

### `enabled`

The ICMP protocol can be enabled/disabled via this option. The default is true.
If enabled Packetbeat will generate the following BPF filter: `"icmp or icmp6"`.