:protocol (-1)

[destan_dee]

Hello

can someone help to understand why there are services with protocol (-1) in object db of managmnet server configuration.

example:

            :exp ("udp, dport = 1604")
            :include_in_any (false)
            :is_default_aggressive_timeout (true)
            :needruleinfo (false)
            :prohibit_aggressive_aging (false)
            :proto_type ()
            :protocol (-1)
            :reload_proof (false)
            :replies (true)
            :sync_on_cluster (true)
            :timeout (0)

thanks

destan

[PhoneBoy]

Based on this snippet, this appears to be a service of type Other.

exp is clearly INSPECT, which is how you define services of type other.

In this case, the service will match udp packets where the destination port is 1604.

[destan_dee]

thank you,

if it is normal udp why is not like any other udp protocol (17) ?

if this service is in use (-1) is it going to course any issue?

br

[PhoneBoy]

Because this particular service was defined as type Other for some reason versus a simple TCP/UDP service.

It should be fine.