[Snort-users] Query on processor(frag2)
WAN FAT WU
wuwanfat at ...8113...
Wed Jan 14 02:09:01 EST 2004
I have one question on processors(frag2).
As I know, frag2 can rebuild each packet from the
pieces and passes the full packet through for
detection once the the process is done,right?
However, where did snort rebuild the packets? in
memory? or in harddisk?
If it rebuilds in memory, then will the memory be
crashed? If it rebuilds in harddisk, then will it be
attacked(as the file was run)?
Happy New Year!
More information about the Snort-users