Re: Problems using flow quantifier

["Joel Esler (jesler)" <jesler () cisco com>]

On Mar 5, 2015, at 3:58 PM, lists () packetmail net<mailto:lists () packetmail net> wrote:

On 03/05/2015 01:41 PM, Research wrote:
Out of curiosity, why was that causing problems ?

Joel?  This has been an issue as long a I've known snort with stream5 +
checksumming.  What is the root cause?


Ultimately the NIC or Virtual NIC if I am understanding the question.  Check out https://www.snort.org/documents

On the page is a document written by William Parker, its called “Possible Packet Loss During Reassembly for Snort 
IDS/IPS Sensors”  It’s under “Additional Resources”.

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos Group

------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!