Snort mailing list archives

Snort and pseudo packet


From: snort user <snort.user () gmail com>
Date: Thu, 22 Oct 2009 15:25:53 -0400

Hello all,

With stream4 there was a concept of pseudo packet; i.e. multiple
tcp segments would be reassembled together into a larger than 1500 byte
pseudo packet and subsequently passed through th ematching engine.

Does stream5 have a similar concept or is it different.
If it is different, can anyone mention briefly about the new approach.

Thanks much !

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel


Current thread: