[Snort-users] Reserve Bit

Matt Kettler mkettler at ...4108...
Tue Jul 20 22:01:01 EDT 2004

At 04:39 PM 7/20/2004, Esler, Joel - Contractor wrote:
>Has anyone ever seen a packet come in with sig id:  523?
>         BAD-TRAFFIC ip reserved bit set

Yes.. ECN (explicit congestion notification) uses the reserved bits IIRC. 

More information about the Snort-users mailing list