preprocessor rpc_decode: \ <ports> [ alert_fragments ] \ [no_alert_multiple_requests] \ [no_alert_large_fragments] \ [no_alert_incomplete]
Option | Description |
---|---|
alert_fragments | Alert on any fragmented RPC record. |
no_alert_multiple_requests | Don't alert when there are multiple records in one packet. |
no_alert_large_fragments | Don't alert when the sum of fragmented records exceeds one packet. |
no_alert_incomplete | Don't alert when a single fragment record exceeds the size of one packet. |