diff --git a/src/or/relay.c b/src/or/relay.c
index 60e895903c..7c90089ae2 100644
--- a/src/or/relay.c
+++ b/src/or/relay.c
@@ -748,7 +748,7 @@ connection_edge_process_relay_cell_not_open(
         return 0;
       }
       if (rh->length >= 8)
-        ttl = (int)ntohl(get_uint32(cell->payload+RELAY_HEADER_SIZE+8));
+        ttl = (int)ntohl(get_uint32(cell->payload+RELAY_HEADER_SIZE+4));
       else
         ttl = -1;
       client_dns_set_addressmap(conn->socks_request->address, addr,