Signature Detail
Short Name |
IP:OPTERR:INVALID-INFRAGMENT |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Category |
IP |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
IP: Option in Fragment
This protocol anomaly triggers when it detects an IP fragment with an IP option that indicates a non-zero fragment offset. Because some IP options are dangerous (and others have only limited use), you may choose to drop these packets.
Extended Description
Any fragmented TCP/IP packet that fails to have the proper fields correctly set constitutes a protocol anomaly. Detecting this condition could be the result of a network configuration error, or that a denial of service attack involving the injection of malformed TCP/IP datagrams is underway.
References