[Snort-sigs] Simple Question!!

SAM IDS sam_ids at ...144...
Mon Mar 29 20:29:12 EST 2004


hello ,
In the 
Signature : alert ip $EXTERNAL_NET any -> $HOME_NET any (msg:"DOS IGMP dos attack"; content:"|02 00|"; depth: 2; ip_proto: 2; fragbits: M+; reference:cve,CVE-1999-0918; classtype:attempted-dos; sid:272; rev:2;) 
 
Whats meant by:
1.depth: 2
2.fragbits: M+
 
thanks
 
SAM



---------------------------------
Do you Yahoo!?
Yahoo! Finance Tax Center - File online. File on time.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040329/c2d90779/attachment.html>


More information about the Snort-sigs mailing list