[Snort-devel] question in re decode.c:DecodePppPkt()

Todd Lewis tlewis at ...255...
Sat Apr 14 12:41:51 EDT 2001


I was just checking out the grinders in anticipation of converting one
or two of them to a protocol engine as a prototype, and I have a question:

Why does DecodePppPkt not check the PPP protocol field to confirm that
PPP is actually carrying an IP packet in this instance before sending
the payload off for IP processing?

--
Todd Lewis
tlewis at ...255...





More information about the Snort-devel mailing list