Re: what does flags: A+ mean in the snort rules?

[James Hoagland <hoagland () SiliconDefense com>]

At 12:27 PM -0600 2/5/02, Charles wrote:
> I know A is for ack bit, but what does the + mean here?

'A+' means the ack bit must be set, and other TCP flag bits may also 
be set.  'A' by itself means that ack is the only bit set.

-- Jim
--
|*      Jim Hoagland, Associate Researcher, Silicon Defense      *|
|*            --- Silicon Defense: IDS Solutions ---             *|
|*  hoagland () SiliconDefense com, http://www.silicondefense.com/  *|
|*   Voice: (530) 756-7317                 Fax: (530) 756-7297   *|

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users