flags keyword is missing C and E flags
As seen on snort-devel:
Back in the December timeframe, I sent in a patch to relabel '1' and '2'
to become 'C' and 'E' in the 'flags', as these bits are now official,
per RFC 3168.
In the ChangeLog for snort-220.127.116.11, I see this:
Changed the reserved bits flags "1, 2" to "C, E". The old values can
be used for backwards compatability.