Re: what does flags: A+ mean in the snort rules?

[Charles <quanxing () Eng Auburn EDU>]

Thank you very much!

Charles


On Tue, 5 Feb 2002, James Hoagland wrote:

> At 12:27 PM -0600 2/5/02, Charles wrote:
> > I know A is for ack bit, but what does the + mean here?
>
> 'A+' means the ack bit must be set, and other TCP flag bits may also 
> be set.  'A' by itself means that ack is the only bit set.
>
> -- Jim
> -- 
> |*      Jim Hoagland, Associate Researcher, Silicon Defense      *|
> |*            --- Silicon Defense: IDS Solutions ---             *|
> |*  hoagland () SiliconDefense com, http://www.silicondefense.com/  *|
> |*   Voice: (530) 756-7317                 Fax: (530) 756-7297   *|


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users