diff --git a/scripts/base/protocols/conn/main.bro b/scripts/base/protocols/conn/main.bro index 7ef204268b..de9a78f975 100644 --- a/scripts/base/protocols/conn/main.bro +++ b/scripts/base/protocols/conn/main.bro @@ -87,7 +87,8 @@ export { ## f packet with FIN bit set ## r packet with RST bit set ## c packet with a bad checksum - ## i inconsistent packet (e.g. SYN+RST bits both set) + ## i inconsistent packet (FIN+RST bits both set) + ## q multi-flag packet (SYN+FIN or SYN+RST bits both set) ## ====== ==================================================== ## ## If the event comes from the originator, the letter is in