Hi,
recently I have seen some Apple devices triggering the
HostDos icmpSize check (set to the default size limit of 1024) on an S-Series:
Event(Notice) for - HostDoS[6] Attack ( icmpSize ) detected on vlan.0. InPort() LEN(1398) DA() SA() C-TAG(8100:) ETYPE(0800) SIP() DIP() VER(4) HLEN(5) TOTALLEN(1376) PROTO(1) TOS(0) TTL(64) ICMP(8:0)
Has anyone else seen this? Is this some (new?) iDevice feature, or connected with using e.g. a VPN on the iDevice?
Thanks,
Erik
