By sa to malo volat, snort ako ho nepoznate, ak ho vobec nepoznate. Ak ho trochu poznate, uz sa nic nove nedozviete. Ak Ste nebodaj citali dokumentaciu dodanu so Snortom, nestracajte cas ;-).
Este k P:
push flag
The push flag tells the receiving end of the tcp connection to "push" all buffered data to the receiving application. It basically says "done for now".
Generally, an interactive application protocol must set the PUSH flag at least in the last SEND call in each command or response sequence. A bulk transfer protocol like FTP should set the PUSH flag on the last segment of a file or when necessary to prevent buffer deadlock.