Logged In: NO

It might also be a good idea to take a look at the snort signature files icmp.rules, icmp-info.rules and scan.rules to see how various ICMP-applications are behaving.