It's the first one.  ACK ACK would specify packets with the ack bit set, irregardless of what other bits were set.  The first one specifies that out of all flags, only ack is set.  the second specifies that out of the ack flag, only the ack flag is set, and the remaining flags can be either set or unset.
 
-Joe
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kaddouch Guillaume
Sent: Monday, May 06, 2002 3:23 PM
To: [EMAIL PROTECTED]
Subject: TCP flags

I want to block any packets that come to me with ONLY the ACK flag set.
But I don't really know the difference between "--tcp-flags ALL ACK" and "--tcp-flags ACK ACK".
I supposed that is the first one, but i'm not sure.
Is it true?
 
 
        Guillaume.

Reply via email to