Signature Detail
Short Name |
IP:OPTERR:DUPLICATE |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
IP |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
IP: Duplicate Option
This protocol anomaly triggers when it detects an IP packet with duplicate IP options. Because some IP options are dangerous (and others have only limited use), you may choose to drop these packets.
Extended Description
Presence of multiple IP option flags in a packet could indicate a transmission error during routing or that a denial of service attack is being attempted.