[Snort-users] DF and MF

Clayton Mascarenhas masclaythesnort at ...131...
Tue Apr 1 00:21:06 EST 2003

Dear list,

The DF bit is set when we need to find the PMTU. However my Snort IDS is detecting packets to my network that have both the DF as well as the MF bit set. When does this scenario happen?? How useful would this be to an attacker? Could someone please help me out?


Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030401/78cb7a87/attachment.html>

More information about the Snort-users mailing list