cancel
Showing results for 
Search instead for 
Did you mean: 

Apple devices triggering HostDos icmpSize

Erik_Auerswald
Contributor II
Hi,

recently I have seen some Apple devices triggering the HostDos icmpSize check (set to the default size limit of 1024) on an S-Series:

Event(Notice) for - HostDoS[6] Attack ( icmpSize ) detected on vlan.0. InPort() LEN(1398) DA() SA() C-TAG(8100:) ETYPE(0800) SIP() DIP() VER(4) HLEN(5) TOTALLEN(1376) PROTO(1) TOS(0) TTL(64) ICMP(8:0)

Has anyone else seen this? Is this some (new?) iDevice feature, or connected with using e.g. a VPN on the iDevice?

Thanks,
Erik
0 REPLIES 0