Snort Optionen I

• tos (Type of Service Bits)

• ttl (Time to Live)

• id (Fragmentation Identifier)

• ip_proto (IP Protokoll)

• sameip (Testet ob Source und Destination Adresse identisch sind)