Re: Snort.org Blog: Snort 2.9.1 beta coming soon!

[Russ Combs <rcombs () sourcefire com>]

See below ...

On Mon, Jun 13, 2011 at 11:45 AM, Martin Holste <mcholste () gmail com> wrote:

> Cool!  Quick preliminary questions:
>
> Will the new stream processing for HTTP perform 206 de-chunking?

No - that is still TBD.  Are you seeing much traffic like this or just
concerned about attacks?

> Does the HTTP, SMTP, etc. logging take place in its own thread, or
> does it block the detection thread?

No - logging is in the main thread.

> ------------------------------------------------------------------------------
> EditLive Enterprise is the world's most technically advanced content
> authoring tool. Experience the power of Track Changes, Inline Image
> Editing and ensure content is compliant with Accessibility Checking.
> http://p.sf.net/sfu/ephox-dev2dev
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel