i've observed this behavior in packet captures while blocking/unblocking/reblocking ICMP outbound ping.
> https://en.wikipedia.org/wiki/Internet_Control_Message_Proto...