/stats/security/dos/help
DoS Help
 
/security/dos/help
iplen : IPv4 packets with bad IP header or payload length.
ipversion : IPv4 packets with IP version not 4.
broadcast : IPv4 packets with broadcast source or destination IP [0.0.0.0,255.255.255.255].
loopback : IPv4 packets with loopback source or destination IP [127.0.0.0/8].
land : IPv4 packets with same source and destination IP.
ipreserved : IPv4 packets with IP reserved bit is set.
ipttl : IPv4 packets with small IP TTL.
ipprot : IPv4 packets with IP protocol greater than highest allowable IP
protocol.
ipoptlen : IPv4 packets with bad IP options length.
fragmoredont: IPv4 packets with more fragments and don't fragment bits are set.
fragdata : IPv4 packets with more fragments bit is set and small payload.
fragboundary: IPv4 packets with more fragments bit is set and payload not at
8-byte boundary.
fraglast : IPv4 packets last fragment without payload.
fragdontoff : IPv4 packets with non-zero fragment offset and don't fragment bits are set.
fragopt : IPv4 packets with non-zero fragment offset and IP options.
fragoff : IPv4 packets with small non-zero fragment offset.
fragoversize: IPv4 packets with non-zero fragment offset and oversize payload.
tcplen : TCP packets with bad TCP header length.
tcpportzero : TCP packets with source or destination port is zero.
blat : TCP packets with SIP!=DIP and SPORT=DPORT.
tcpreserved : TCP packets with TCP reserved bit is set.
nullscan : TCP packets with all control bits are zero.
fullxmasscan: TCP packets with all control bits are set.
finscan : TCP packets with only FIN bit is set.
vecnascan : TCP packets with only URG or PUSH or URG|FIN or
PSH|FIN or URG|PSH bits are set.
xmasscan : TCP packets with FIN, URG and PSH bits are set.
synfinscan : TCP packets with SYN and FIN bits are set.
flagabnormal: TCP packets with abnormal control bits combination.
syndata : TCP packets with SYN bit is set and with payload.
synfrag : TCP packets with SYN bit is set and more fragments bit is set.
ftpport : TCP packets with SPORT=20, DPORT<1024 and SYN bit is set.
dnsport : TCP packets with SPORT=53, DPORT<1024 and SYN bit is set.
seqzero : TCP packets with sequence number is zero.
ackzero : TCP packets with acknowledgement number is zero and ACK bit is set.
 

tcpoptlen : TCP packets with bad TCP options length.
udplen : UDP packets with bad UDP header length.
udpportzero : UDP packets with source or destination port is zero.
fraggle : UDP packets to broadcast destination IP (x.x.x.255).
pepsi : UDP packets with SPORT=19, DPORT=7 or SPORT=7, DPORT=19.
rc8 : UDP packets with SPORT=7 and DPORT=7.
snmpnull : UDP packets with DPORT=161 and without payload.
icmplen : ICMP packets with bad ICMP header length.
smurf : ICMP ping requests to a broadcast destination IP (x.x.x.255).
icmpdata : ICMP packets with zero fragment offset and large payload.
icmpoff : ICMP packets with large fragment offset.
icmptype : ICMP packets with type is unassigned or reserved.
igmplen : IGMP packets with bad IGMP header length.
igmpfrag : IGMP packets with more fragments bit is set or non-zero fragment offset.
igmptype : IGMP packets with type is unassigned or reserved.
arplen : ARP request or reply packets with bad length.
arpnbcast : ARP request packets with non broadcast destination MAC.
arpnucast : ARP reply packets with non unicast destination MAC.
arpspoof : ARP request or reply packets with mismatch source with sender
MACs or destination with target MACs.
garp : ARP request or reply packets with same source and destination IP.
ip6len : IPv6 packets with bad header length.
ip6version : IPv6 packets with IP version not 6.