Which of the following is NOT included in a Snort rule headers?

Which of the following is NOT included in a Snort rule headers?

A.
protocol

B.
action

C.
source IP address

D.
packet byte offset

E.
source port