Table 163 Zywall - Snort Equivalent Terms - ZyXEL Communications ZyWALL USG 300 User Manual

Chapter 30 IDP
The rule header contains the rule's:
• Action
• Protocol
• Source and destination IP addresses and netmasks
• Source and destination ports information.
The rule option section contains alert messages and information on which parts of the packet
should be inspected to determine if the rule action should be taken.
These are some equivalent Snort terms in the ZyWALL.

Table 163 ZyWALL - Snort Equivalent Terms

ZYWALL TERM
Type Of Service
Identification
Fragmentation
Fragmentation Offset
Time to Live
IP Options
Same IP
Transport Protocol
Transport Protocol: TCP
Port
Flow
Flags
Sequence Number
Ack Number
Window Size
Transport Protocol: UDP
Port
Transport Protocol: ICMP
Type
Code
ID
Sequence Number
Payload Options
Payload Size
Offset (relative to start of payload)
Relative to end of last match
Content
Case-insensitive
Decode as URI
490
SNORT EQUIVALENT TERM
tos
id
fragbits
fragoffset
ttl
ipopts
sameip
(In Snort rule header)
flow
flags
seq
ack
window
(In Snort rule header)
(In Snort rule header)
itype
icode
icmp_id
icmp_seq
(Snort rule options)
dsize
offset
distance
content
nocase
uricontent
ZyWALL USG 300 User's Guide