[Snort-users] Stream5 reassembly

Parag Pote pipsparag at ...131...
Mon May 31 01:31:16 EDT 2010


Hi,

What does ports (ports client and ports both) means in stream5 preprocessor? Just had a glance at the code and it says it does reassembly when we configure this option. Just wanted to know is it mandatory to configure it or optional one? If we do not configure do we miss any functionality? 

Rgds,
Parag


      





More information about the Snort-users mailing list