[Snort-devel] ip datagram checksum

Martin Roesch roesch at ...48...
Fri Sep 29 11:53:46 EDT 2000


Snort doesn't check the checksum, this can be a somewhat expensive operation
for each packet.  OTOH, it really should be checked to avoid insertion attacks
on the defragger and stream reassembler.  Probably something we should think
hard about adding soon...

     -Marty

Alberto Dainotti wrote:
> 
> Hello, does snort perform checksum routines against the
> ip datagrams ?
> If not, is there a patch or will it be a next feature ?
> Thanks,
>                                 Alberto.
> 
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-devel

-- 
Martin Roesch
roesch at ...48...
http://www.snort.org



More information about the Snort-devel mailing list