Date: Thu, 1 Mar 2007 09:36:27 +0100 From: Daniel Hartmeier <daniel@benzedrine.cx> To: Eduardo Meyer <dudu.meyer@gmail.com> Cc: freebsd-pf@freebsd.org Subject: Re: flags tcp and abscence of flag Message-ID: <20070301083627.GA16493@insomnia.benzedrine.cx> In-Reply-To: <d3ea75b30702281148q41a585c7s7ec1f4d3361be554@mail.gmail.com> References: <d3ea75b30702281111q1160f097oc07e135e4d4d52c3@mail.gmail.com> <Pine.NEB.4.64.0702281336230.1764@glacier.reedmedia.net> <d3ea75b30702281148q41a585c7s7ec1f4d3361be554@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Feb 28, 2007 at 04:48:37PM -0300, Eduardo Meyer wrote: > Translating to human lang, what I want is "look everywhere and match > only packets with fin set but syn, rst and ack unset. > > How can I do the "unset" evaluation? "flags F/FSRA" does precisely that. It is not the same as "flags F/F", which would only test whether FIN is set. Daniel
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070301083627.GA16493>