tcp-flags

Syntax

tcp-flags {(ack | no-ack);(fin | no-fin);(psh | no-psh);(r1 | no-r1);(r2 | no-r2);(rst | no-rst);(syn | no-syn);(urg | no-urg);}

Hierarchy Level

[edit security idp custom-attack attack-name attack-type signature protocol tcp]

Release Information

Statement introduced in Release 9.3 of Junos OS.

Description

Specify that IDP looks for a pattern match whether or not the TCP flag is set.

Options

ack | no-ack—When set, the acknowledgment flag acknowledges receipt of a packet.

fin | no-fin—When set, the final flag indicates that the packet transfer is complete and the connection can be closed.

psh | no-psh—When set, the push flag indicates that the receiver should push all data in the current sequence to the destination application (identified by the port number) without waiting for the remaining packets in the sequence.

r1 | no-r1—When set, indicates that the R1 retransmission threshold has been reached.

r2 | no-r2—When set, indicates that the R2 retransmission threshold has been reached.

rst | no-rst—When set, the reset flag resets the TCP connection, discarding all packets in an existing sequence.

syn | no-syn—When set, indicates that the sending device is asking for a three-way handshake to initialize communications.

urg | no-urg—When set, the urgent flag indicates that the packet data is urgent.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.