Hi,

I have added tcp_flags to my config and want to be sure I understand this 
correctly.

When I see a record that says for example, tcpflags =2 and packet count=10 does 
that mean that *all* 10 of those packets had bit 1 set, or does it mean there 
was a 10-packet sequence and bit 1 was set at least once?

I am trying to count the number of SYNs.  So for example if I take (tcpflags & 
2) and the packet count is 10, does that mean there were 10 syns?

Thanks.
- matt



      

_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to