Actions
Feature #281
closedflags keyword is missing C and E flags
Effort:
Difficulty:
Label:
Description
As seen on snort-devel:
Back in the December timeframe, I sent in a patch to relabel '1' and '2'
to become 'C' and 'E' in the 'flags', as these bits are now official,
per RFC 3168.
In the ChangeLog for snort-2.9.0.4, I see this:
- src/detection-plugins/sp_tcp_flag_check.c:
Changed the reserved bits flags "1, 2" to "C, E". The old values can
still
be used for backwards compatability.
Actions