[Snort-devel] Snort 2.0.6 is available!

Andrew Rucker Jones arjones at ...2237...
Thu Dec 18 12:14:53 EST 2003

Hash: SHA1

| * Out-of-order ACK problem from Andrew Rucker.  Also, updated stream4
|   to the most recent version from HEAD.

Would have been nice to get my name right. :) Not worried about it, though.

	I'm interested in the diff between versions and of
spp_stream4.c, beginning line 4003 in the old version. You say that line
causes an off-by-one error. That's interesting, because when i was
testing for my patch for 2.0.5, the debugging messages made it clear
that not including that line was causing an off-by-one error in the
other direction. Stream4 kept expecting one more byte at the end of a
connection than it was getting, and it was because it counted the FIN as
a data byte. (Admittedly, the error was harmless, but i thought the fix
was, too.) Under what conditions does my change cause an off-by-one, and
where is it compensated for?


- --
GPG key / Schlüssel -- http://simultan.dyndns.org/~arjones/gpgkey.txt
Encrypt everything. / Alles verschlüsseln.

Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


More information about the Snort-devel mailing list