The transmission original address disguise packet detection device, transmission original address disguise packet method of detection, being the transmission original address disguise packet detection

摘要

A source address spoofed packet detection apparatus for detecting a packet spoofing the source IP address is performed, it becomes possible to control the input and output of the packet to acquire the TTL value of the input packet with the source IP address of the input packet corresponding to the source IP address of the input packet and the reference TTL value storage unit for storing in association with the source address as a reference TTL value representing a packet control unit, the range of normal survival time, the TTL value of the input packet The comparison is made with the reference TTL value, based on the result of the comparison, and an address determining unit determining impersonate the presence of spoofing the source IP address in the incoming packet.