[Snort-sigs] stream5 and use_static_footprint_sizes
guise.mcallaster at ...2420...
Mon Dec 7 16:44:58 EST 2009
I inherited some snorts and noticed that they all had the
'use_static_footprint_sizes' option enabled for the streams5 preprocessor.
Can someone please give me more info about this. I am reading in the manual
where it recommends not to have this turned on in production but it looks
like a lot of people use it. Why?
The README says it emulates stream4 flushing of reassembled packets but I
still do not know what this means.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-sigs