[Bro] Connections

[abd abd]

Hi,
 
a would make a NIDS, for that i must construct a connections, one conection begin with Syn+Syn_Ack+Ack+......+Ack+.......Fin_Ack+ack+Fin_ack+ack. 
I don't find an exemple, how make FLAG, flag can be S0, RSTO, SF, REJ.  
 
Can you give a documentation for construction of connections and attributs like FLAG, Duration, .....
 
Thank you verry mutch


      _____________________________________________________________________________ 
Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20070811/67e8ca7d/attachment.html