Re: über-packet

[Chris Wilson <chris () aptivate org>]

Hi!

On Fri, 4 Mar 2011, elof () sentor se wrote:

> Many years ago, snort logged stream-matches as an über-packet, i.e. a packet
> far bigger than the normal max 1500 bytes frame size.
>
> The size of such über-packet events was usually 64kB.
>
> Q1: Is this behavior completely decapricated?

Has it had the goats removed? I doubt it.

Cheers, Chris.
-- 
Aptivate | http://www.aptivate.org | Phone: +44 1223 760887
The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES

Aptivate is a not-for-profit company registered in England and Wales
with company number 04980791.

------------------------------------------------------------------------------
What You Don't Know About Data Connectivity CAN Hurt You
This paper provides an overview of data connectivity, details
its effect on application quality, and explores various alternative
solutions. http://p.sf.net/sfu/progress-d2d

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel