Icmp fields not populating

Thanks for reporting this, seems like it may be a bug. That said, monitor.duration.us should be functionally equivalent. Technically, it factors in the time to run any validation code, but that's essentially a no-op for ICMP, so it should be equivalent.