[Snort-users] what does flags: A+ mean in the snort rules?

James Hoagland hoagland at ...47...
Tue Feb 5 11:33:03 EST 2002


At 12:27 PM -0600 2/5/02, Charles wrote:
>I know A is for ack bit, but what does the + mean here?

'A+' means the ack bit must be set, and other TCP flag bits may also 
be set.  'A' by itself means that ack is the only bit set.

-- Jim
-- 
|*      Jim Hoagland, Associate Researcher, Silicon Defense      *|
|*            --- Silicon Defense: IDS Solutions ---             *|
|*  hoagland at ...47..., http://www.silicondefense.com/  *|
|*   Voice: (530) 756-7317                 Fax: (530) 756-7297   *|




More information about the Snort-users mailing list