Snort mailing list archives

Discrepency between Base and linked packet


From: "Matthew Babcock" <MBabcock () AandRTech com>
Date: Mon, 23 Mar 2009 16:18:18 -0400 (EDT)


Hello all,

A short time back I noticed someone was talking about an issue where the
packet downloaded via base had different headers then shown between
wireshark and base.

The top layers are represented the same in Base and the .pcap. However the
bottom layers are not correct. The data in the Data Link and Network
layers is just wrong, the Transport layer also cites bad TCP Checksums.
Thanks in advance.

What was the reason and fix?

Also, is the mailing list archived somewhere?


Regards,
-- Matthew R. Babcock
CEO, Principal Consultant
A & R Technology Consulting - Providing solutions, not limitations -
MBabcock () AandRTech com
(508) 397-8280




------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: