Re: Weird traceroutes

[bejtlich () TEXAS NET (Richard Bejtlich)]

Hi Donald,

I've seen many instances of decrementing TTLs and RST, RST 
ACK, and SYN ACK packets.  I've seen some with simple SYN 
packets too.  I've theorized they are DoS related but I 
have never been able to formulate an explanation.  Probably 
need someone familiar with TCP/IP stack internals to help 
us here...

Richard

---

I've been seeing weird packets with counting TTLs...