Properties
PseudoReass_MaxConcurrent
Maximum number of concurrent fragment reas-
semblies. Set to 0 to drop all fragments. (Default:
1024)
IllegalFrags
Illegaly constructed fragments; partial overlaps, bad
sizes, etc. (Default: DropLog)
DuplicateFragData
On receipt of duplicate fragments, verify matching
data... (Default: Check8)
FragReassemblyFail
Failed packet reassembly attempts - due to timeouts
or packet losses. (Default: LogSuspectSubseq)
DroppedFrags
Fragments of packets dropped due to rule base.
(Default: LogSuspect)
DuplicateFrags
Duplicate fragments received. (Default: LogSuspect)
FragmentedICMP
Fragmented ICMP messages other than Ping; nor-
mally invalid. (Default: DropLog)
MinimumFragLength
Minimum allowed length of non-last fragments.
(Default: 8)
ReassTimeout
Timeout of a reassembly, since previous received
fragment. (Default: 65)
ReassTimeLimit
Maximum lifetime of a reassembly, since first re-
ceived fragment. (Default: 90)
ReassDoneLinger
How long to remember a completed reassembly
(watching for old dups). (Default: 20)
ReassIllegalLinger
How long to remember an illegal reassembly
(watching for more fragments). (Default: 60)
IP6IllegalFrags
Illegaly constructed fragments; partial overlaps, bad
sizes, etc. (Default: DropLog)
IP6DuplicateFragData
On receipt of duplicate fragments, verify matching
data... (Default: Check8)
IP6FragReassemblyFail
Failed packet reassembly attempts - due to timeouts
or packet losses. (Default: LogSuspectSubseq)
IP6DroppedFrags
Fragments of packets dropped due to rule base.
(Default: LogSuspect)
IP6DuplicateFrags
Duplicate fragments received. (Default: LogSuspect)
IP6MinimumFragLength
Minimum allowed length of non-last fragments.
(Default: 8)
IP6ReassTimeout
Timeout of a reassembly, since previous received
fragment. (Default: 65)
IP6ReassTimeLimit
Maximum lifetime of a reassembly, since first re-
ceived fragment. (Default: 90)
IP6ReassDoneLinger
How long to remember a completed reassembly
3.52.6. FragSettings Chapter 3. Configuration Reference
175