Why Relying exclusively on ICMP for Network Monitoring is Half-Baked 🍞🤦‍♂️

Ronald BartelsRonald Bartels
4 min read

Network operators love to talk a big game when it comes to monitoring, but when you ask them for actual interface statistics, they go as silent as a dodgy UPS during load shedding. ⚡🔇

Here’s the harsh reality: Most ISPs and network operators don’t bother monitoring the actual service path. Instead, they rely on ICMP probes from their core to the edge on a separate management plane—a method so flawed it’s like trying to diagnose a heart problem by checking your toe’s pulse. 🩺👣

Where’s the real monitoring? The SNMP-based polling of switch ports, optics, and bit rate counters? The kind of stats that tell you if there’s congestion, errors, or packet loss at the actual service level? Nowhere. And that’s a serious lack of due diligence. 😡


ICMP Monitoring | The "Diet Coke" of Network Visibility 🍹

ICMP (ping, traceroute, etc.) is the lazy man's way of checking a network. Sure, it’s easy, but it’s also:

Not service-aware – It tests a separate path, usually via the out-of-band management network, instead of the real data path.

Doesn’t show congestion – Just because an ICMP ping gets through doesn’t mean your network isn’t choking on traffic.

No error detection – ICMP doesn’t check for frame loss, CRC errors, or optical power issues, all of which can cause degraded performance long before a full outage happens.

Path dependent – Probes typically go in one direction (core to edge), ignoring the fact that uplink and downlink issues are independent.

It’s like checking a car’s engine by listening to the radio—it might work, but you’re missing 99% of the picture. 🚗🎶


SNMP Polling | The Gold Standard for Real Network Monitoring 🏅

If you really want to monitor a network, SNMP (Simple Network Management Protocol) polling is the only reliable way to do it.

Monitors real traffic paths – Polling interface counters gives insight into actual user traffic, not just management plane traffic.

Detects congestion early – If you’re only relying on ICMP, you won’t see a problem until there’s actual packet loss. SNMP shows growing congestion before things break.

Error tracking – Optical power, CRC errors, discards—these are the real indicators of a failing link. ICMP won't show these.

Historical data – You can track trends over time, making it possible to proactively upgrade or reroute traffic before a bottleneck forms.

So why don’t operators use SNMP properly? 🤨


The Real Reason Network Operators Don’t Poll Properly 💸📉

1️⃣ It Costs Money – Running an NMIS (Network Management & Information System) with proper SNMP polling means storage, compute, and operational effort. Many ISPs would rather just throw ICMP-based monitoring at the problem and call it a day.

2️⃣ They Don’t Want to Admit There’s a Problem – If you’re a lazy ISP and a customer complains, what’s easier? Showing them SNMP stats proving a congested port or just saying "No problem on our side, must be your WiFi"? 🧐

3️⃣ It Exposes Poor Network Design – When you poll interfaces properly, you’ll find oversubscription, misconfigured QoS, and errors. Many ISPs simply don’t want to deal with fixing their own mess.

4️⃣ Lack of Knowledge – Believe it or not, some network engineers don’t even know how to configure proper SNMP polling. In 2025, that’s like a doctor not knowing how to use a stethoscope. 🩺


How to Tell If Your ISP is Half-Baked 🍞💩

Want to test if your ISP or network operator actually knows what they’re doing? Ask them these questions:

1️⃣ Can you show me interface utilization and error counters for my connection? If they say, "We don’t have that", 🚨 red flag.

2️⃣ How do you monitor congestion on my link? If they just say "We ping it", they’re winging it.

3️⃣ Can I see optical power levels for my fibre connection? If they stare at you like you’ve just asked for their bank PIN, you know the answer.


Wrapping up | ICMP Alone is an Excuse, Not a Monitoring Solution 🚫

If a network operator doesn't have SNMP-based polling, they are not doing real network monitoring. Full stop.

🔹 ICMP-based monitoring is half-baked and useless for troubleshooting real issues.
🔹 SNMP polling is essential for detecting congestion, errors, and service-impacting problems before they escalate.
🔹 If an operator can’t provide SNMP-based stats, they’re either incompetent or hiding something.

So next time your ISP blames "the Internet" for your problems, ask them for real stats. If they can’t provide them, you’ll know exactly what’s going on: they don’t monitor their own network properly. 😤

Your Thoughts?

Have you ever asked your ISP for real SNMP stats and gotten nothing but excuses? Drop your stories in the comments below! ⬇️🔥

0
Subscribe to my newsletter

Read articles from Ronald Bartels directly inside your inbox. Subscribe to the newsletter, and don't miss out.

Written by

Ronald Bartels
Ronald Bartels

Driving SD-WAN Adoption in South Africa