/security/dos/help iplen : IPv4 packets with bad IP header or payload length. ipversion : IPv4 packets with IP version not 4. broadcast : IPv4 packets with broadcast source or destination IP [0.0.0.0,255.255.255.255]. loopback : IPv4 packets with loopback source or destination IP [127.0.0.0/8]. land : IPv4 packets with same source and destination IP. ipreserved : IPv4 packets with IP reserved bit is set. ipttl : IPv4 packets with small IP TTL. ipprot : IPv4 packets with IP protocol greater than highest allowable IP protocol. ipoptlen : IPv4 packets with bad IP options length. fragmoredont: IPv4 packets with more fragments and don't fragment bits are set. fragdata : IPv4 packets with more fragments bit is set and small payload. fragboundary: IPv4 packets with more fragments bit is set and payload not at 8-byte boundary. fraglast : IPv4 packets last fragment without payload. fragdontoff : IPv4 packets with non-zero fragment offset and don't fragment bits are set. fragopt : IPv4 packets with non-zero fragment offset and IP options. fragoff : IPv4 packets with small non-zero fragment offset. fragoversize: IPv4 packets with non-zero fragment offset and oversize payload. tcplen : TCP packets with bad TCP header length. tcpportzero : TCP packets with source or destination port is zero. blat : TCP packets with SIP!=DIP and SPORT=DPORT. tcpreserved : TCP packets with TCP reserved bit is set. nullscan : TCP packets with all control bits are zero. fullxmasscan: TCP packets with all control bits are set. finscan : TCP packets with only FIN bit is set. vecnascan : TCP packets with only URG or PUSH or URG|FIN or PSH|FIN or URG|PSH bits are set. xmasscan : TCP packets with FIN, URG and PSH bits are set. synfinscan : TCP packets with SYN and FIN bits are set. flagabnormal: TCP packets with abnormal control bits combination. syndata : TCP packets with SYN bit is set and with payload. synfrag : TCP packets with SYN bit is set and more fragments bit is set. ftpport : TCP packets with SPORT=20, DPORT<1024 and SYN bit is set. dnsport : TCP packets with SPORT=53, DPORT<1024 and SYN bit is set. seqzero : TCP packets with sequence number is zero. ackzero : TCP packets with acknowledgement number is zero and ACK bit is set. |
tcpoptlen : TCP packets with bad TCP options length. udplen : UDP packets with bad UDP header length. udpportzero : UDP packets with source or destination port is zero. fraggle : UDP packets to broadcast destination IP (x.x.x.255). pepsi : UDP packets with SPORT=19, DPORT=7 or SPORT=7, DPORT=19. rc8 : UDP packets with SPORT=7 and DPORT=7. snmpnull : UDP packets with DPORT=161 and without payload. icmplen : ICMP packets with bad ICMP header length. smurf : ICMP ping requests to a broadcast destination IP (x.x.x.255). icmpdata : ICMP packets with zero fragment offset and large payload. icmpoff : ICMP packets with large fragment offset. icmptype : ICMP packets with type is unassigned or reserved. igmplen : IGMP packets with bad IGMP header length. igmpfrag : IGMP packets with more fragments bit is set or non-zero fragment offset. igmptype : IGMP packets with type is unassigned or reserved. arplen : ARP request or reply packets with bad length. arpnbcast : ARP request packets with non broadcast destination MAC. arpnucast : ARP reply packets with non unicast destination MAC. arpspoof : ARP request or reply packets with mismatch source with sender MACs or destination with target MACs. garp : ARP request or reply packets with same source and destination IP. ip6len : IPv6 packets with bad header length. ip6version : IPv6 packets with IP version not 6. |