From ac9552a0cf2aedbfb678d9927b26c5cd3fb4ed7e Mon Sep 17 00:00:00 2001 From: Daniel Thayer Date: Thu, 20 Aug 2015 10:45:22 -0500 Subject: [PATCH] Update documentation of Conn::Info history field --- scripts/base/protocols/conn/main.bro | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/scripts/base/protocols/conn/main.bro b/scripts/base/protocols/conn/main.bro index 7ef204268b..015c5520db 100644 --- a/scripts/base/protocols/conn/main.bro +++ b/scripts/base/protocols/conn/main.bro @@ -87,7 +87,8 @@ export { ## f packet with FIN bit set ## r packet with RST bit set ## c packet with a bad checksum - ## i inconsistent packet (e.g. SYN+RST bits both set) + ## i inconsistent packet (e.g. FIN+RST bits set) + ## q multi-flag packet (SYN+FIN or SYN+RST bits set) ## ====== ==================================================== ## ## If the event comes from the originator, the letter is in