Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 408 / 1026

•
PSH bit—When set, the push flag indicates that the receiver should push all data in
the current sequence to the destination application (identified by the port number)
without waiting for the remaining packets in the sequence.
•
RST bit—When set, the reset flag resets the TCP connection, discarding all packets in
an existing sequence.
• SYN bit—When set, the SYN flag indicates a request for a new session.
• FIN bit—When set, the final flag indicates that the packet transfer is complete and the
connection can be closed.
•
R1 bit—This reserved bit (1 of 2) is not used.
• R2 bit—This reserved bit (2 of 2) is not used.
UDP Headers
For attacks that use UDP and a packet context, in the Protocol tab, select UDP Packet
Header Fields from TCP/UDP/ICMP Header Matches menu, then set values for the
following UDP fields:
•
Source Port—Specify an operand (none, =, !, >, <) and a decimal value for the port
number on the attacking device.
• Dest. Port—Specify an operand (none, =, !, >, <) and a decimal value for the port number
of the attack target.
•
Data Length—Specify an operand (none, =, !, >, <) and a decimal value for the number
of bytes in the data payload.
ICMP Headers
For attacks that use ICMP and a packet context, in the Protocol tab, select ICMP Packet
Header Fields from TCP/UDP/ICMP Header Matches menu, then set values for the
following ICMP fields:
•
ICMP Type—Specify an operand (none, =, !, >, <) and a decimal value for the primary
code that identifies the function of the request/reply.
• ICMP Code—Specify an operand (none, =, !, >, <) and a decimal value for the secondary
code that identifies the function of the request/reply within a given type.
•
Seq. Number—Specify an operand (none, =, !, >, <) and a decimal value for the sequence
number of the packet. This number identifies the location of the request/reply in relation
to the entire sequence.
•
Id—Specify an operand (none, =, !, >, <) and a decimal value for the identification
number is a unique value used by the destination system to associate requests and
replies.
• Data Length—Specify an operand (none, =, !, >, <) and a decimal value for the number
of bytes in the data payload.
Copyright © 2010, Juniper Networks, Inc. 358
Network and Security Manager Administration Guide