[Snort-users] what does flags: A+ mean in the snort rules?

Charles quanxing at ...4668...
Tue Feb 5 11:55:02 EST 2002


Thank you very much!

Charles


On Tue, 5 Feb 2002, James Hoagland wrote:

> At 12:27 PM -0600 2/5/02, Charles wrote:
> >I know A is for ack bit, but what does the + mean here?
> 
> 'A+' means the ack bit must be set, and other TCP flag bits may also 
> be set.  'A' by itself means that ack is the only bit set.
> 
> -- Jim
> -- 
> |*      Jim Hoagland, Associate Researcher, Silicon Defense      *|
> |*            --- Silicon Defense: IDS Solutions ---             *|
> |*  hoagland at ...47..., http://www.silicondefense.com/  *|
> |*   Voice: (530) 756-7317                 Fax: (530) 756-7297   *|
> 





More information about the Snort-users mailing list