[Snort-devel] loopback network

Martin Roesch roesch at ...402...
Sun Jul 29 23:12:42 EDT 2001

No problem, I was pretty sure I cleared this one up.  We have to shift
the packet two bytes to the right in the frag rebuild code under Solaris
or we get bus errors (gotta love the Sparc's infatuation with those
32-bit alignments), and I initially added it and then forgot to move one
of the code segments over under non-Solaris OS's.  


Phil Wood wrote:
> Marty,
> My humble apologies.  The problem with the loopback packets is fixed
> in Version 1.8.1-beta5 (Build 59)
> I was running Version 1.8.1-beta3 (Build 47) on the system that generated
> the bogus re-assembled fragments!
> I just tested using:
>    ping -f -s 1500 -c 1000
> build 47 generated the phony packets, build 59 didn't.
> Sorry,
> Phil

Martin Roesch
roesch at ...402...
http://www.sourcefire.com - http://www.snort.org

More information about the Snort-devel mailing list