Signature Detail
Short Name |
P2P:AUDIT:GNUTELLA-TTL |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
P2P |
Release Date |
2004/01/23 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
GNUTELLA: TTL Hops Too Large
This protocol anomaly is a Gnutella message with a TTL that exceeds the user-defined maximum. The default TTL is 8; you can change this setting in the Sensor Settings Rulebase>Protocol Thresholds and Configuration>Gnutella>Maximum TTL hops. The Gnutella RFC recommends an 8 to 10 TTL maximum for Gnutella messages.
Extended Description
None
References