---
title: Capture ICMP traffic
description: The icmp section of the packetbeat.yml config file specifies options for the ICMP protocol. Here is a sample configuration section for ICMP: Also see...
url: https://www.elastic.co/elastic/docs-builder/docs/3016/reference/beats/packetbeat/packetbeat-icmp-options
products:
  - Beats
  - Packetbeat
applies_to:
  - Elastic Cloud Serverless: Generally available
  - Elastic Stack: Generally available
---

# Capture ICMP traffic
The `icmp` section of the `packetbeat.yml` config file specifies options for the ICMP protocol. Here is a sample configuration section for ICMP:
```yaml
packetbeat.protocols:

- type: icmp
  enabled: true
```


## Configuration options

Also see [Common protocol options](https://www.elastic.co/elastic/docs-builder/docs/3016/reference/beats/packetbeat/common-protocol-options).

### `enabled`

The ICMP protocol can be enabled/disabled via this option. The default is true.
If enabled Packetbeat will generate the following BPF filter: `"icmp or icmp6"`.