newbe info needed

["/dev/null" <dev.null () beginthread com>]

RE: [Snort-users] Having trouble using -b switchWhich will get a packet
first?  Will snort or my iptables?  Any good URLs you can recommend to
help clear up what the kernel does with network traffic when it comes
in?

If I re-comp the kernel with the CONFIG_IP_ALWAYS_DEFRAG turned on, will
snort see the fragmented packets before the kernel defragments them, or
will it only see the defragged packet?

Any URLs for further reading (besides the snort user manual)?

Thanks!



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users