Preview Tool

Cisco Bug: CSCuw36228 - Incorrect tagging of TTL value in the EDR records

Last Modified

May 22, 2017

Products (1)

  • Cisco ASR 5000 Series

Known Affected Releases

18.3.a0.61024 19.2.d0 20.0.0 20.0.v0

Description (partial)

Mismatch between TTL value in TCP OS signature field and the IP TTL value populated in EDR records
causing incorrect tethering detection.

When both IP TTL and TCP OS signature is enabled in EDR 

Following configuration is required in edr-format:

<i>edr-format xxx</i>
<i>rule-variable flow ttl priority 1</i>
<i>rule-variable tcp os-signature priority 2</i>
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.