I don't know how to identify icmp packets and associated process id , is there any reference for it ?

[iouvxz]

[majibow]

https://github.com/basil00/Divert/blob/134dd37bd0a87d3d236214e42edc1867b8911c6f/doc/windivert.html

See section filter language: filter for icmp or icmpv6

[basil00]

To get icmp packets, you use the NETWORK layer. To get the process ID, you need to use the SOCKET or FLOW layers. Then you need to write some code to associate the two layers. It is complex but possible. Tallow does something like this, but for non-icmp traffic.