tcp-flags
Syntax
tcp-flags {
(ack | no-ack);
(fin | no-fin);
(psh | no-psh);
(r1 | no-r1);
(r2 | no-r2);
(rst | no-rst);
(syn | no-syn);
(urg | no-urg);
}
Hierarchy Level
[edit security idp custom-attack attack-name attack-type signature protocol tcp]
Description
Specify that IDP looks for a pattern match whether or not the TCP flag is set.
Options
ack|no-ack—When set, the acknowledgment flag acknowledges receipt of a packet.fin|no-fin—When set, the final flag indicates that the packet transfer is complete and the connection can be closed.psh|no-psh—When set, the push flag indicates that the receiver should push all data in the current sequence to the destination application (identified by the port number) without waiting for the remaining packets in the sequence.r1|no-r1—When set, indicates that the R1 retransmission threshold has been reached.r2|no-r2—When set, indicates that the R2 retransmission threshold has been reached.rst|no-rst—When set, the reset flag resets the TCP connection, discarding all packets in an existing sequence.syn|no-syn—When set, indicates that the sending device is asking for a three-way handshake to initialize communications.urg|no-urg—When set, the urgent flag indicates that the packet data is urgent.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 9.3.