[Snort-devel] New Stream reassembly code committed

Sjsnort sjsnort at ...398...
Thu May 10 07:21:18 EDT 2001


Sorry to bug you again, but i still get Snort-1.8(beta4) Build 18 from
sourceforge. http://snort.sourceforge.net/snort-daily.tar.gz

Siddhartha

----- Original Message -----
From: "Martin Roesch" <roesch at ...402...>
To: "snort-dev" <snort-devel at lists.sourceforge.net>
Sent: Wednesday, May 09, 2001 12:48 AM
Subject: [Snort-devel] New Stream reassembly code committed


> Ok, I think we have a solution for the memory leaks in the stream
> reassembler.  I just committed "stream3" to CVS, have a look at it and
> try it out.  The new stream reassembler can handle a user-defined number
> of streams (default 8192) simultaneously and should be able to do so
> with more efficiency than the old one.  The new stream reassembler uses
> a self-balancing AVL tree to store the stream nodes so it should be able
> to handle a huge number of simultaneous sessions (on the order of
> 16-32,000).  Have a look at it and let me know how it works for you,
> it's had some moderate testing here and appears to be working
> decently...
>
>
>      -Marty
>
>
> --
> Martin Roesch
> roesch at ...402...
> http://www.sourcefire.com - http://www.snort.org
>
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> http://lists.sourceforge.net/lists/listinfo/snort-devel


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com





More information about the Snort-devel mailing list