•
redirect: Specifies the ICMP redirect type.
•
source-quench: Specifies the ICMP source quench type.
•
time-exceeded: Specifies the ICMP time exceeded type.
•
timestamp-reply: Specifies the ICMP timestamp reply type.
•
timestamp-request: Specifies the ICMP timestamp request type.
icmpv6-type: Specifies an ICMPv6 packet attack by the packet type. You can specify the packet
type by a number or a keyword:
•
icmpv6-type-value: Specifies the ICMPv6 packet type in the range of 0 to 255.
•
destination-unreachable: Specifies the ICMPv6 destination unreachable type.
•
echo-reply: Specifies the ICMPv6 echo reply type.
•
echo-request: Specifies the ICMPv6 echo request type.
•
group-query: Specifies the ICMPv6 group query type.
•
group-reduction: Specifies the ICMPv6 group reduction type.
•
group-report: Specifies the ICMPv6 group report type.
•
packet-too-big: Specifies the ICMPv6 packet too big type.
•
parameter-problem: Specifies the ICMPv6 parameter problem type.
•
time-exceeded: Specifies the ICMPv6 time exceeded type.
impossible: Specifies the IP impossible packet attack.
ip-option: Specifies an IP option. You can specify the IP option by a number or a keyword:
•
option-code: Specifies the IP option in the range of 0 to 255.
•
internet-timestamp: Specifies the timestamp option.
•
loose-source-routing: Specifies the loose source routing option.
•
record-route: Specifies the record route option.
•
route-alert: Specifies the route alert option.
•
security: Specifies the security option.
•
stream-id: Specifies the stream identifier option.
•
strict-source-routing: Specifies the strict source route option.
ip-option-abnormal: Specifies the abnormal IP option attack.
ipv6-ext-header ext-header-value: Specifies an IPv6 extension header by its value in the range of 0
to 255.
land: Specifies the Land attack.
large-icmp: Specifies the large ICMP packet attack.
large-icmpv6: Specifies the large ICMPv6 packet attack.
ping-of-death: Specifies the ping-of-death attack.
smurf: Specifies the smurf attack.
snork: Specifies the UDP snork attack.
tcp-all-flags: Specifies the attack where the TCP packet has all flags set.
tcp-fin-only: Specifies the attack where the TCP packet has only the FIN flag set.
tcp-invalid-flags: Specifies the attack that uses TCP packets with invalid flags.
tcp-null-flag: Specifies the attack where the TCP packet has no flags set.
tcp-syn-fin: Specifies the attack where the TCP packet has both SYN and FIN flags set.
586