Hi,
a would make a NIDS, for that i must construct a connections, one conection begin with Syn+Syn_Ack+Ack+…+Ack+…Fin_Ack+ack+Fin_ack+ack.
I don’t find an exemple, how make FLAG, flag can be S0, RSTO, SF, REJ.
Can you give a documentation for construction of connections and attributs like FLAG, Duration, …
Thank you verry mutch