Snort mailing list archives
Re: checksum_mode
From: Jason Brvenik <jasonb () sourcefire com>
Date: Mon, 05 Sep 2005 12:06:41 -0400
Pablo Nebrera wrote:
I don't understand this option in the snort configuration file.
http://www.snort.org/docs/snort_htmanuals/htmanual_2.4/node10.html#SECTION00303000000000000000
Does it check the checksum for every packet?
If configured to do so.
What is the checksum of a packet?
http://en.wikipedia.org/wiki/ChecksumEssentially a checksum is a sanity check that the packet has not been corrupted or otherwise modified in flight.
more about how it is used in packets can be found here http://www.networksorcery.com/enp/default0703.htm
What does this option do exactly??
Checks the calculated checksum against the one in the packets and will discard the packets if they do not match.
ThanksPablo ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- checksum_mode Pablo Nebrera (Sep 05)
- Re: checksum_mode Jason Brvenik (Sep 05)
- Re: checksum_mode Bamm Visscher (Sep 05)