Default TTL (Time To Live) Values of Different OS


Read {count} times since 2020

TTL (Time To Live) is a timer value included in packets sent over networks that tells the recipient how long to hold or use the packet before discarding and expiring the data (packet). TTL values are different for different Operating Systems. So, you can determine the OS based on the TTL value. You can get the TTL value by pinging an address. Here is the output got by pinging “subinsb.com” on my system :

PING subinsb.com (108.162.199.61) 56(84) bytes of data.
64 bytes from 108.162.199.61: icmp_seq=1 ttl=57 time=503 ms
64 bytes from 108.162.199.61: icmp_seq=2 ttl=57 time=416 ms

As you can see from the output, you got the TTL value. Since this website is hosted on a Red Hat system, it returned 57 which is close to 64 (TTL default value of Linux system). So, from this we can understand the OS of the remote system. Here are the default TTL values of different devices / Operating Systems :

<td>
  Version
</td>

<td>
  Protocol
</td>

<td>
  TTL
</td>
<td>
</td>

<td>
  TCP
</td>

<td>
  60
</td>
<td>
</td>

<td>
  UDP
</td>

<td>
  30
</td>
<td>
  3.2, 4.1
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
  BSD/OS 3.1 and 4.0
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
  Tru64 v5.0
</td>

<td>
  ICMP
</td>

<td>
  64
</td>
<td>
</td>

<td>
  ICMP
</td>

<td>
  254
</td>
<td>
  V5
</td>

<td>
  TCP and UDP
</td>

<td>
  30
</td>
<td>
</td>

<td>
  ICMP
</td>

<td>
  64
</td>
<td>
  2.1R
</td>

<td>
  TCP and UDP
</td>

<td>
  64
</td>
<td>
  3.4, 4.0
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
  5
</td>

<td>
  ICMP
</td>

<td>
  64
</td>
<td>
  9.0x
</td>

<td>
  TCP and UDP
</td>

<td>
  30
</td>
<td>
  10.01
</td>

<td>
  TCP and UDP
</td>

<td>
  64
</td>
<td>
  10.2
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
  11
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
  11
</td>

<td>
  TCP
</td>

<td>
  64
</td>
<td>
  5.3
</td>

<td>
  TCP and UDP
</td>

<td>
  60
</td>
<td>
  6.x
</td>

<td>
  TCP and UDP
</td>

<td>
  60
</td>
<td>
  6.5.3, 6.5.8
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
</td>

<td>
  ICMP
</td>

<td>
  64
</td>
<td>
</td>

<td>
  ICMP
</td>

<td>
  200
</td>
<td>
  2.0.x kernel
</td>

<td>
  ICMP
</td>

<td>
  64
</td>
<td>
  2.2.14 kernel
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
  2.4 kernel
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
  Red Hat 9
</td>

<td>
  ICMP and TCP
</td>

<td>
  64
</td>
<td>
  2.0.x
</td>

<td>
  TCP and UDP
</td>

<td>
  60
</td>
<td>
  X (10.5.6)
</td>

<td>
  ICMP/TCP/UDP
</td>

<td>
  64
</td>
<td>
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
</td>

<td>
  ICMP and UDP
</td>

<td>
  64
</td>
<td>
  2.6 & 2.7
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
  07.01.2002
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
  TCP/IP 3.0
</td>

<td>
</td>

<td>
  64
</td>
<td>
  V3.2A
</td>

<td>
  TCP
</td>

<td>
  60
</td>
<td>
  V3.2A
</td>

<td>
  UDP
</td>

<td>
  30
</td>
<td>
  2.5.1, 2.6, 2.7, 2.8
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
  2.8
</td>

<td>
  TCP
</td>

<td>
  64
</td>
<td>
  TCP_OS
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
  TCP_OS (14.2-)
</td>

<td>
  TCP and UDP
</td>

<td>
  30
</td>
<td>
  TCP_OS (14.3+)
</td>

<td>
  TCP and UDP
</td>

<td>
  64
</td>
<td>
  STCP
</td>

<td>
  ICMP/TCP/UDP
</td>

<td>
  60
</td>
<td>
  4.1.3/4.1.4
</td>

<td>
  TCP and UDP
</td>

<td>
  60
</td>
<td>
  5.7
</td>

<td>
  ICMP and TCP
</td>

<td>
  255
</td>
<td>
  V4.1/V4.2A
</td>

<td>
  TCP
</td>

<td>
  60
</td>
<td>
  V4.1/V4.2A
</td>

<td>
  UDP
</td>

<td>
  30
</td>
<td>
  V4.2 – 4.5
</td>

<td>
  ICMP
</td>

<td>
  255
</td>
<td>
</td>

<td>
  TCP and UDP
</td>

<td>
  64
</td>
<td>
</td>

<td>
  TCP
</td>

<td>
  60
</td>
<td>
</td>

<td>
  UDP
</td>

<td>
  64
</td>
<td>
  1.1.1.1
</td>

<td>
  TCP
</td>

<td>
  128
</td>
<td>
  1.1.1.1
</td>

<td>
  UDP
</td>

<td>
  30
</td>
<td>
</td>

<td>
  TCP and UDP
</td>

<td>
  128
</td>
<td>
  for Workgroups
</td>

<td>
  TCP and UDP
</td>

<td>
  32
</td>
<td>
  95
</td>

<td>
  TCP and UDP
</td>

<td>
  32
</td>
<td>
  98
</td>

<td>
  ICMP
</td>

<td>
  32
</td>
<td>
  98, 98 SE
</td>

<td>
  ICMP
</td>

<td>
  128
</td>
<td>
  98
</td>

<td>
  TCP
</td>

<td>
  128
</td>
<td>
  NT 3.51
</td>

<td>
  TCP and UDP
</td>

<td>
  32
</td>
<td>
  NT 4.0
</td>

<td>
  TCP and UDP
</td>

<td>
  128
</td>
<td>
  NT 4.0 SP5-
</td>

<td>
</td>

<td>
  32
</td>
<td>
  NT 4.0 SP6+
</td>

<td>
</td>

<td>
  128
</td>
<td>
  NT 4 WRKS SP 3, SP 6a
</td>

<td>
  ICMP
</td>

<td>
  128
</td>
<td>
  NT 4 Server SP4
</td>

<td>
  ICMP
</td>

<td>
  128
</td>
<td>
  ME
</td>

<td>
  ICMP
</td>

<td>
  128
</td>
<td>
  2000 pro
</td>

<td>
  ICMP/TCP/UDP
</td>

<td>
  128
</td>
<td>
  2000 family
</td>

<td>
  ICMP
</td>

<td>
  128
</td>
<td>
  Server 2003
</td>

<td>
</td>

<td>
  128
</td>
<td>
  XP
</td>

<td>
  ICMP/TCP/UDP
</td>

<td>
  128
</td>
<td>
  Vista
</td>

<td>
  ICMP/TCP/UDP
</td>

<td>
  128
</td>
<td>
  7
</td>

<td>
  ICMP/TCP/UDP
</td>

<td>
  128
</td>
<td>
  Server 2008
</td>

<td>
  ICMP/TCP/UDP
</td>

<td>
  128
</td>
<td>
  10
</td>

<td>
  ICMP/TCP/UDP
</td>

<td>
  128
</td>
Device / OS
AIX
AIX
AIX
BSDI
Compa
Cisco
DEC Pathworks
Foundry
FreeBSD
FreeBSD
FreeBSD
HP-UX
HP-UX
HP-UX
HP-UX
HP-UX
Irix
Irix
Irix
juniper
MPE/IX (HP)
Linux
Linux
Linux
Linux
MacOS/MacTCP
MacOS/MacTCP
NetBSD
Netgear FVG318
OpenBSD
OpenVMS
OS/2
OSF/1
OSF/1
Solaris
Solaris
Stratus
Stratus
Stratus
Stratus
SunOS
SunOS
Ultrix
Ultrix
Ultrix
VMS/Multinet
VMS/TCPware
VMS/TCPware
VMS/Wollongong
VMS/Wollongong
VMS/UCX
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows

I will update this table in the future when there’s a release of new important OS whenever I get the time. You can get the short version of default TTL values by this table :

<td>
  TTL
</td>
<td>
  64
</td>
<td>
  128
</td>
<td>
  254
</td>
Device / OS
*nix (Linux/Unix)
Windows
Solaris/AIX

You can find it yourself by pinging localhost as mentioned by Gurubaran :

ping -4 localhost
Show Comments