I'm having problem with this,Something in my system (Linux/Fedora 24/x64) keep sending ping's to several IP address,and i like to know which process is responsible for this.I found several articles (and answers) to use auditctl but it didn't work for me.Update: found my problem, see it in the answers below.
Monitor which application generate ICMP/ping traffic
iptables;audit