[Snort-devel] Query on processor(frag2)
WAN FAT WU
wuwanfat at ...1218...
Wed Jan 14 07:28:01 EST 2004
I have one question on processors(frag2).
As I know, frag2 can rebuild each packet from the
pieces and passes the full packet through for
detection once the the process is done,right?
However, where did snort rebuild the packets? in
memory? or in harddisk?
If it rebuild in memory, then will the memory be
crash? If it rebuild in harddisk, then will it be
Happy New Year!
More information about the Snort-devel