[Snort-users] Query on processor(frag2)

WAN FAT WU wuwanfat at ...8113...
Wed Jan 14 02:09:01 EST 2004

Dear friends,

  I have one question on processors(frag2). 
  As I know, frag2 can rebuild each packet from the
pieces and passes the full packet through for
detection once the the process is done,right?
  However, where did snort rebuild the packets? in
memory? or in harddisk? 
  If it rebuilds in memory, then will the memory be
crashed? If it rebuilds in harddisk, then will it be
attacked(as the file was run)?

Happy New Year!

Shining Friends、好心好報、歲月如歌...
浪漫鈴聲  情心連繫

More information about the Snort-users mailing list