tcp-flags

date_range 06-May-24

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
tcp-flags {
    (ack | no-ack);
    (fin | no-fin);
    (psh | no-psh);
    (r1 | no-r1);
    (r2 | no-r2);
    (rst | no-rst);
    (syn | no-syn);
    (urg | no-urg);
}

Hierarchy Level

content_copy zoom_out_map
[edit security idp custom-attack attack-name attack-type signature protocol tcp]

Description

Specify that IDP looks for a pattern match whether or not the TCP flag is set.

Options

ack | no-ack—When set, the acknowledgment flag acknowledges receipt of a packet.
fin | no-fin—When set, the final flag indicates that the packet transfer is complete and the connection can be closed.
psh | no-psh—When set, the push flag indicates that the receiver should push all data in the current sequence to the destination application (identified by the port number) without waiting for the remaining packets in the sequence.
r1 | no-r1—When set, indicates that the R1 retransmission threshold has been reached.
r2 | no-r2—When set, indicates that the R2 retransmission threshold has been reached.
rst | no-rst—When set, the reset flag resets the TCP connection, discarding all packets in an existing sequence.
syn | no-syn—When set, indicates that the sending device is asking for a three-way handshake to initialize communications.
urg | no-urg—When set, the urgent flag indicates that the packet data is urgent.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 9.3.

arrow_backward PREVIOUS tcp-fast-open

NEXT arrow_forward tcp-forwarding (Processes)

Junos CLI Reference

ON THIS PAGE