Signature Detail
Short Name |
ECHO:EXPLOIT:MISMATCHING-REPLY |
|---|---|
Severity |
High |
Recommended |
No |
Category |
ECHO |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
ECHO: Mismatching Server Reply
This protocol anomaly triggers when it detects a mismatch between an ECHO line going from the client to the server and the ECHO line returning from the server to the client. This can indicate data tunneling over ECHO packets.
Extended Description
The presence of these kinds of anomalous echo packets could indicate that data is being tunneled over the Echo port.
References