Question

Apple devices triggering HostDos icmpSize

  • 26 November 2018
  • 0 replies
  • 29 views

Userlevel 7
Hi,

recently I have seen some Apple devices triggering the HostDos icmpSize check (set to the default size limit of 1024) on an S-Series:

Event(Notice) for [i] - HostDoS[6] Attack ( icmpSize ) detected on vlan.0. InPort() LEN(1398) DA() SA() C-TAG(8100:) ETYPE(0800) SIP() DIP() VER(4) HLEN(5) TOTALLEN(1376) PROTO(1) TOS(0) TTL(64) ICMP(8:0)

Has anyone else seen this? Is this some (new?) iDevice feature, or connected with using e.g. a VPN on the iDevice?

Thanks,
Erik

0 replies

Be the first to reply!

Reply