[Snort-users] guidance - UNKNOWN *1**R*** RESERVEDBIT

Crist J. Clark cjclark at ...960...
Sat Jan 20 01:02:14 EST 2001


On Fri, Jan 19, 2001 at 01:08:03PM -0600, Mark Scott wrote:
> Hi,
> 
> Can someone tell me what this means?
> 
> Thanks,
> 
> Mark
> ***********************************
> Jan 19 12:48:14 64.68.71.140:80 -> x.x.x.x:59139 UNKNOWN *1**R***
> RESERVEDBIT

Looks like ECN? RFC2481.
-- 
Crist J. Clark                           cjclark at ...485...




More information about the Snort-users mailing list