tdetect detects someone running traceroute against your system. It does this by detecting UDP (Unix traceroute) or ICMP ECHO (Windows traceroute) packets with TTL fields == 1.