[Snort-devel] über-packet

Chris Wilson chris at ...3150...
Fri Mar 4 10:21:15 EST 2011


Hi!

On Fri, 4 Mar 2011, elof at ...969... wrote:

> Many years ago, snort logged stream-matches as an über-packet, i.e. a packet
> far bigger than the normal max 1500 bytes frame size.
> 
> The size of such über-packet events was usually 64kB.
> 
> Q1: Is this behavior completely decapricated?

Has it had the goats removed? I doubt it.

Cheers, Chris.
-- 
Aptivate | http://www.aptivate.org | Phone: +44 1223 760887
The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES

Aptivate is a not-for-profit company registered in England and Wales
with company number 04980791.


More information about the Snort-devel mailing list