[Snort-users] fragbits option

Sheahan, Paul (PCLN-NW) Paul.Sheahan at ...2218...
Wed Mar 27 11:49:02 EST 2002


Hello,

I'm testing using the fragbits option and have read the doc on writing
rules. I'm trying to figure out my options when using the fragbits option.
When is a "+" sign used and when is it not? For example, what's the
difference between:

fragbits: D

and

fragbits: D+


And are there other symbols besides "+" that can be used? The docs are not
very clear on this......


Thanks,

Paul Sheahan
Manager of Information Security
Priceline.com
paul.sheahan at ...2218...






More information about the Snort-users mailing list