[Snort-devel] Simple Question!!

SAM IDS sam_ids at ...398...
Mon Apr 5 07:08:16 EDT 2004


hello ,
In the 
Signature : alert ip $EXTERNAL_NET any -> $HOME_NET any (msg:"DOS IGMP dos attack"; content:"|02 00|"; depth: 2; ip_proto: 2; fragbits: M+; reference:cve,CVE-1999-0918; classtype:attempted-dos; sid:272; rev:2;) 
 
Whats meant by:
1.depth: 2
2.fragbits: M+
 
thanks
 
SAM



---------------------------------
Do you Yahoo!?
Yahoo! Finance Tax Center - File online. File on time.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20040405/8f65cfaa/attachment.html>


More information about the Snort-devel mailing list