Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Why does LLMNR set TTL=1 for TCP queries and responses?

April 26, 2017llmnr queries TCP

0

Posted

Why does LLMNR set TTL=1 for TCP queries and responses?

1 Answer

0

Posted

Within LLMNR, unicast queries MUST be sent using TCP. Setting TTL=1 within the TCP three way handshake ensures that a connection will only be set up to a host on the same link. If TTL=255 were set on the TCP SYN, then an LLMNR connection could be set up to any host on the Internet. This doesn’t make sense for linklocal name resolution.