flags keyword is missing C and E flags
As seen on snort-devel:
Back in the December timeframe, I sent in a patch to relabel '1' and '2'
to become 'C' and 'E' in the 'flags', as these bits are now official,
per RFC 3168.
In the ChangeLog for snort-126.96.36.199, I see this:
Changed the reserved bits flags "1, 2" to "C, E". The old values can
be used for backwards compatability.