[Snort-users] Session mixup by stream4
sonali.gupta at ...11827...
Tue Feb 8 21:33:21 EST 2005
I did check for packet drops, and snort statistics showed that there
was no packet drop in either case.
On Tue, 08 Feb 2005 11:54:41 -0500, Matt Kettler <mkettler at ...4108...> wrote:
> At 04:30 AM 2/8/2005, Sonali Gupta wrote:
> >Is there any difference between the session reassemble real time and
> >session reassemble using r option.
> There's little difference between the two, the only significant difference
> I know if is that there's no packet drops when using -r.
> Did you check for packet drops in your earlier tests? Did snort B drop more
> packets than A?
More information about the Snort-users