ECHO: Mismatching Server Reply

This protocol anomaly triggers when it detects a mismatch between an ECHO line going from the client to the server and the ECHO line returning from the server to the client. This can indicate data tunneling over ECHO packets.

Extended Description

The presence of these kinds of anomalous echo packets could indicate that data is being tunneled over the Echo port.

Short Name
ECHO:EXPLOIT:MISMATCHING-REPLY
Severity
Major
Recommended
False
Recommended Action
None
Category
ECHO
Release Date
04/22/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?