ICMPv6: Echo Reply Resent w/Different Length

This protocol anomaly triggers when it detects an ICMPv6 echo reply retransmission (for example, with the same ID and sequence numbers) with different data length. This can indicate data tunneling over ICMPv6.

Short Name
ICMP6:EXPLOIT:DIFF-LEN-IN-RESP
Severity
Info
Recommended
False
Recommended Action
None
Category
ICMP6
Keywords
Echo ICMPv6 Length Reply Resent w/Different
Release Date
06/23/2016
Supported Platforms

srx-branch-12.3

srx-branch-19.3

vsrx3bsd-19.2

vsrx3bsd-19.4

srx-branch-19.4

vsrx-19.4

srx-19.4

vsrx-12.3

srx-12.3

vsrx-19.2

srx-19.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?