[Snort-users] Session mixup by stream4

Sonali Gupta sonali.gupta at ...11827...
Tue Feb 8 21:33:21 EST 2005

Hi Matt
I did check for packet drops, and snort statistics showed that there
was no packet drop in either case.


On Tue, 08 Feb 2005 11:54:41 -0500, Matt Kettler <mkettler at ...4108...> wrote:
> At 04:30 AM 2/8/2005, Sonali Gupta wrote:
> >Is there any difference between the session reassemble real time and
> >session reassemble using ­r option.
> There's little difference between the two, the only significant difference
> I know if is that there's no packet drops when using -r.
> Did you check for packet drops in your earlier tests? Did snort B drop more
> packets than A?

More information about the Snort-users mailing list