[Snort-users] Discrepency between Base and linked packet

Matthew Babcock MBabcock at ...14532...
Mon Mar 23 16:18:18 EDT 2009

Hello all,

A short time back I noticed someone was talking about an issue where the
packet downloaded via base had different headers then shown between
wireshark and base.

The top layers are represented the same in Base and the .pcap. However the
bottom layers are not correct. The data in the Data Link and Network
layers is just wrong, the Transport layer also cites bad TCP Checksums.
Thanks in advance.

What was the reason and fix?

Also, is the mailing list archived somewhere?

-- Matthew R. Babcock
CEO, Principal Consultant
A & R Technology Consulting - Providing solutions, not limitations -
MBabcock at ...14532...
(508) 397-8280

More information about the Snort-users mailing list