[Snort-devel] Tcp Reassembly Question?

Smith, Donald Donald.Smith at ...530...
Sun May 5 06:00:04 EDT 2002


Interesting question for someone who works at a Korean
NIDS provider.


http://www.pentasecurity.com/

> -----Original Message-----
> From: Peter Johnson [mailto:rottz at ...403...]
> Sent: Sunday, May 05, 2002 12:16 AM
> To: acetcom at ...1357...
> Cc: snort-devel at lists.sourceforge.net
> Subject: Re: [Snort-devel] Tcp Reassembly Question?
> 
> 
> Checkout:
> IP Fragmentation and Fragrouter
> http://rr.sans.org/encryption/IP_frag.php
> 
> acetcom at ...1357... wrote:
> > I'll analyze snort source about tcp reassembly seeing 
> preprocess stream4. 
> > but it's difficult to me. 
> > would you suggest to me good paper about tcp reassembly?
> <snip sourceforge.net spam>
> </snip>
> > https://lists.sourceforge.net/lists/listinfo/snort-devel
> 
> 
> _______________________________________________________________
> 
> Have big pipes? SourceForge.net is looking for download 
> mirrors. We supply
> the hardware. You get the recognition. Email Us: 
> bandwidth at ...12...
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> 




More information about the Snort-devel mailing list