[Snort-devel] [Snort-users] 220.127.116.11 performance issue
l0rdch0de1m0rt at ...2499...
Thu Nov 18 11:26:10 EST 2010
Hello. To be clear, there is no fix for the "http_inspect\stream
reassembly" bug at the moment (if there is a fix in SVN, let me know
so I can take action here b/c this is seriously a non-trivial bug for
me). Apparently it is an issue with Stream5 having premature buffer
Government/Critical Infrastructure companies take note: this bug leads
to easy IDS/IPS evasion and this issue, "predates Snort 2.9.0"
according to Sourcefire.
On Thu, Nov 18, 2010 at 10:09 AM, matan monitz <mmonitz at ...2499...> wrote:
> sounds related to the http_inspect\stream reassembly bugfix
More information about the Snort-devel