[Snort-sigs] TCP header reserved bits

Y M snort at ...3751...
Tue Jul 28 12:46:15 EDT 2015


I was wondering if there is a content modifier or some way to check whether the low order reserved bits of byte offset 12 in the TCP header is set. There is nothing I could find about this in the documentation. I also checked gid:129 rules and couldn't infer that the check/detection is available.

Any pointers or help is welcome.

Thanks.
YM
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20150728/6260dfad/attachment.html>


More information about the Snort-sigs mailing list