Fortinet Network Device IPS Uživatelský manuál stáhnout pdf (Strana 30)

FortiGate IPS User Guide Version 3.0 MR7

30 01-30007-0080-20080916

Creating custom signatures Custom signatures

Table 6: TCP header keywords

Keyword and Value Description

--ack <ack_int>; Check for the specified TCP acknowledge

number.

--dst_port [!]{<port_int> |

:<port_int> | <port_int>: |

<port_int>:<port_int>};

The destination port number.

You can specify a single port or port range:

• <port_int> is a single port.

• :<port_int> includes the specified port and

all lower numbered ports.

• <port_int>: includes the specified port and

all higher numbered ports.

• <port_int>:<port_int> includes the two

specified ports and all ports in between.

--seq <seq_int>; Check for the specified TCP sequence number.

--src_port [!]{<port_int> |