Snort mailing list archives
Query on processor(frag2)
From: WAN FAT WU <wuwanfat () yahoo com hk>
Date: Wed, 14 Jan 2004 18:07:59 +0800 (CST)
Dear friends, I have one question on processors(frag2). As I know, frag2 can rebuild each packet from the pieces and passes the full packet through for detection once the the process is done,right? However, where did snort rebuild the packets? in memory? or in harddisk? If it rebuilds in memory, then will the memory be crashed? If it rebuilds in harddisk, then will it be attacked(as the file was run)? Happy New Year! Fred _________________________________________________________ Shining Friends、好心好報、歲月如歌... 浪漫鈴聲 情心連繫 http://ringtone.yahoo.com.hk/ ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Query on processor(frag2) WAN FAT WU (Jan 14)