[Snort-devel] Stream5 Question

snort user snort.user at ...2499...
Fri Aug 31 10:58:49 EDT 2007


Hello and Greetings.

Does stream5, in the inline mode, perform reassembly for every tcp
segment (with data) ?
or is it done every 'n' segments (where n > 1) based on when the flush
point is reached ?

Thanks




More information about the Snort-devel mailing list