[Snort-sigs] TCP header reserved bits
snort at ...3751...
Tue Jul 28 12:46:15 EDT 2015
I was wondering if there is a content modifier or some way to check whether the low order reserved bits of byte offset 12 in the TCP header is set. There is nothing I could find about this in the documentation. I also checked gid:129 rules and couldn't infer that the check/detection is available.
Any pointers or help is welcome.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-sigs