–
TCP Flag SYN set and Source Port < 1024 or TCP Control Flags = 0
and
–
TCP Sequence Number = 0 or TCP Flags FIN, URG, and PSH set
and
–
TCP Sequence Number = 0 or TCP Flags SYN and FIN set.
•
TCP Offset:
–
Checks for TCP header offset =1.
•
TCP SYN:
–
TCP Flag SYN set.
•
TCP SYN & FIN:
–
TCP Flags SYN and FIN set.
•
TCP FIN & URG & PSH:
–
TCP Flags FIN and URG and PSH set and TCP Sequence Number =
0.
•
ICMP V6:
–
Limiting the size of ICMPv6 Ping packets.
•
ICMP Fragment:
–
Checks for fragmented ICMP packets.
Commands in this Section
This section explains the following commands:
dos-control firstfrag
dos-control icmp
dos-control l4port
dos-control sipdip
dos-control tcpflag
dos-control tcpfrag
rate-limit cpu
show dos-control
show system internal pktmgr
storm-control broadcast
storm-control multicast
storm-control unicast
Security Commands
1022