[Snort-devel] snort and fragmentation

Gianni Tedesco gianni at ...1808...
Thu Mar 27 10:02:06 EST 2003


On Thu, 2003-03-27 at 13:57, rmkml wrote:
> there was not an initial fragment ...
> and there was no fragment since 12h ...

There is an initial fragment.

It's the last one. Most stacks put fragments on the network in reverse
order as an optimization for the reciever.

-- 
// Gianni Tedesco (gianni at scaramanga dot co dot uk)
lynx --source www.scaramanga.co.uk/gianni-at-ecsc.asc | gpg --import
8646BE7D: 6D9F 2287 870E A2C9 8F60 3A3C 91B5 7669 8646 BE7D
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20030327/c027c64a/attachment.sig>


More information about the Snort-devel mailing list