3.42. FragSettings
Description
Settings related to fragmented packets.
Properties
PseudoReass_MaxConcurrent Maximum number of concurrent fragment
reassemblies. Set to 0 to drop all fragments.
(Default: 1024)
IllegalFrags Illegaly constructed fragments; partial overlaps,
bad sizes, etc. (Default: DropLog)
DuplicateFragData On receipt of duplicate fragments, verify matching
data... (Default: Check8)
FragReassemblyFail Failed packet reassembly attempts - due to
timeouts or packet losses. (Default:
LogSuspectSubseq)
DroppedFrags Fragments of packets dropped due to rule base.
(Default: LogSuspect)
DuplicateFrags Duplicate fragments received. (Default:
LogSuspect)
FragmentedICMP Fragmented ICMP messages other than Ping;
normally invalid. (Default: DropLog)
MinimumFragLength Minimum allowed length of non-last fragments.
(Default: 8)
ReassTimeout Timeout of a reassembly, since previous received
fragment. (Default: 65)
ReassTimeLimit Maximum lifetime of a reassembly, since first
received fragment. (Default: 90)
ReassDoneLinger How long to remember a completed reassembly
(watching for old dups). (Default: 20)
ReassIllegalLinger How long to remember an illegal reassembly
(watching for more fragments). (Default: 60)
IP6IllegalFrags Illegaly constructed fragments; partial overlaps,
bad sizes, etc. (Default: DropLog)
IP6DuplicateFragData On receipt of duplicate fragments, verify matching
data... (Default: Check8)
IP6FragReassemblyFail Failed packet reassembly attempts - due to
timeouts or packet losses. (Default:
LogSuspectSubseq)
IP6DroppedFrags Fragments of packets dropped due to rule base.
(Default: LogSuspect)
IP6DuplicateFrags Duplicate fragments received. (Default:
Chapter 3: Configuration Reference
178
To Next Page
Loading...
