next up previous contents
Next: Format Up: Non-Payload Detection Rule Options Previous: Warning   Contents

fragbits

The fragbits keyword is used to check if fragmentation and reserved bits are set in the IP header.

The following bits may be checked:

M
- More Fragments
D
- Don't Fragment
R
- Reserved Bit

The following modifiers can be set to change the match criteria:

+
match on the specified bits, plus any others
*
match if any of the specified bits are set
!
match if the specified bits are not set



Subsections

Eugene Misnik 2013-05-08