[Snort-devel] Snort.org Blog: Snort 2.9.1 beta coming soon!

Russ Combs rcombs at ...402...
Mon Jun 13 12:13:19 EDT 2011


See below ...

On Mon, Jun 13, 2011 at 11:45 AM, Martin Holste <mcholste at ...2499...> wrote:

> Cool!  Quick preliminary questions:
>
> Will the new stream processing for HTTP perform 206 de-chunking?
>

No - that is still TBD.  Are you seeing much traffic like this or just
concerned about attacks?

>
> Does the HTTP, SMTP, etc. logging take place in its own thread, or
> does it block the detection thread?
>

No - logging is in the main thread.

>
>
> ------------------------------------------------------------------------------
> EditLive Enterprise is the world's most technically advanced content
> authoring tool. Experience the power of Track Changes, Inline Image
> Editing and ensure content is compliant with Accessibility Checking.
> http://p.sf.net/sfu/ephox-dev2dev
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20110613/8ed0fc7f/attachment.html>


More information about the Snort-devel mailing list