chris at ...3150...
Fri Mar 4 10:21:15 EST 2011
On Fri, 4 Mar 2011, elof at ...969... wrote:
> Many years ago, snort logged stream-matches as an über-packet, i.e. a packet
> far bigger than the normal max 1500 bytes frame size.
> The size of such über-packet events was usually 64kB.
> Q1: Is this behavior completely decapricated?
Has it had the goats removed? I doubt it.
Aptivate | http://www.aptivate.org | Phone: +44 1223 760887
The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES
Aptivate is a not-for-profit company registered in England and Wales
with company number 04980791.
More information about the Snort-devel