[Snort-devel] query on snort

Martin Roesch roesch at ...402...
Wed Jan 26 19:28:01 EST 2005


The asynchronous mode in stream4 is meant for use on networks where we 
can't guarantee seeing both sides of a TCP conversation and we have to 
use our best guess on things like state tracking and accepting stream 
segments.

      -Marty

On Jan 26, 2005, at 9:34 AM, Adayadil Thomas wrote:

> What do we mean by asynchronous state ?
> with respect to the UpdateState and TCPAction methods ?
>
> thanks
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
> Tool for open source databases. Create drag-&-drop reports. Save time
> by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
> Download a FREE copy at http://www.intelliview.com/go/osdn_nl
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
>
>
-- 
Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616
Sourcefire - Discover.  Determine.  Defend.
roesch at ...402... - http://www.sourcefire.com
Snort: Open Source Network IDS - http://www.snort.org





More information about the Snort-devel mailing list