Security Incidents mailing list archives
Re: Weird traceroutes
From: bejtlich () TEXAS NET (Richard Bejtlich)
Date: Sat, 29 Apr 2000 03:32:22 -0000
Hi Donald, I've seen many instances of decrementing TTLs and RST, RST ACK, and SYN ACK packets. I've seen some with simple SYN packets too. I've theorized they are DoS related but I have never been able to formulate an explanation. Probably need someone familiar with TCP/IP stack internals to help us here... Richard --- I've been seeing weird packets with counting TTLs...
Current thread:
- Re: Weird traceroutes Richard Bejtlich (Apr 28)