Detect Decoy scans created by Nmap

Done by comparing TTL values of original packet received and ICMP Echo
Reply