# Connections

**URL:** <https://community.zeek.org/t/connections/1210>\
**Category:** Zeek\
**Created:** [August 11, 2007, 6:23pm UTC](https://community.zeek.org/t/connections/1210 "2007-08-11T18:23:52Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![abd\_abd](https://avatars.discourse-cdn.com/v4/letter/a/858c86/32.png) [@abd\_abd](https://community.zeek.org/u/abd_abd)\
**Post date:** [August 11, 2007, 6:23pm UTC](https://community.zeek.org/t/connections/1210/1 "2007-08-11T18:23:52Z")

</div>

Hi,

a would make a NIDS, for that i must construct a connections, one conection begin with Syn+Syn\_Ack+Ack+…+Ack+…Fin\_Ack+ack+Fin\_ack+ack.  
I don’t find an exemple, how make FLAG, flag can be S0, RSTO, SF, REJ.

Can you give a documentation for construction of connections and attributs like FLAG, Duration, …

Thank you verry mutch

---

<div class="post-metadata">

**Author:** ![robin](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/robin/32/599_2.png) [@robin](https://community.zeek.org/u/robin)\
**Post date:** [August 15, 2007, 1:10am UTC](https://community.zeek.org/t/connections/1210/2 "2007-08-15T01:10:45Z")

</div>

Sorry, I also don't really understand the question here?

Robin

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:38pm UTC](https://community.zeek.org/t/connections/1210/3 "2022-05-06T15:38:19Z")

</div>