Next: Format
Up: Non-Payload Detection Rule Options
Previous: Warning
Contents
The fragbits keyword is used to check if fragmentation and reserved
bits are set in the IP header.
The following bits may be checked:
- M
- - More Fragments
- D
- - Don't Fragment
- R
- - Reserved Bit
The following modifiers can be set to change the match criteria:
- +
- match on the specified bits, plus any others
- *
- match if any of the specified bits are set
- !
- match if the specified bits are not set
Subsections
Eugene Misnik
2013-05-08