@briankrebs omg, using the TTL as a classifier for a tethered device is sneaky. How would you even start troubleshooting that? What if you set it higher? Do you then get labelled as a hacker?