[Snort-devel] ip datagram checksum

Martin Roesch roesch at ...48...
Fri Sep 29 11:53:46 EDT 2000

Snort doesn't check the checksum, this can be a somewhat expensive operation
for each packet.  OTOH, it really should be checked to avoid insertion attacks
on the defragger and stream reassembler.  Probably something we should think
hard about adding soon...


Alberto Dainotti wrote:
> Hello, does snort perform checksum routines against the
> ip datagrams ?
> If not, is there a patch or will it be a next feature ?
> Thanks,
>                                 Alberto.
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-devel

Martin Roesch
roesch at ...48...

More information about the Snort-devel mailing list