Filter on specific TTL value?

Ian Chard <[email protected]>
Newsgroups gmane.os.openbsd.pf
Message-ID <[email protected]> 
Hi,

Is it possible to filter on a specific TTL value?  Long story short: 
there are rogue packets being generated somewhere in our network's core, 
and I can reliably identify them with a combination of IP TOS, TCP flags 
and TTL value.  I'd like to filter them out with pf if at all possible.

Cheers
- Ian

-- 
Ian Chard, Senior Unix and Network Gorilla | E: [email protected]
Systems and Electronic Resources Service   | T:  80587 / (01865) 280587
Oxford University Library Services         | F:          (01865) 242287
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.