Snort mailing list archives
Re: snort session reassembly problem
From: Erek Adams <erek () snort org>
Date: Fri, 7 Mar 2003 17:06:31 -0500 (EST)
On Fri, 7 Mar 2003, Edin Dizdarevic wrote:
Hi Erek,
Hiya Edin,
Would you please explain that. Why is it so? What is the difference? Reading the information from a file sequentially should not be really that different from reading it off the wire. What do in that case the information given by Snort mean after the file has been processed?
To be honest, I really can't say. I'm not much of a coder, so I'll have to munge thru the code. Let me start reading and I'll see if I can get some insight into it. Maybe one of the main coders would be able to comment on it. ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson ------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort session reassembly problem gupta_sonali (Mar 07)
- Re: snort session reassembly problem Erek Adams (Mar 07)
- Re: snort session reassembly problem Edin Dizdarevic (Mar 07)
- Re: snort session reassembly problem Erek Adams (Mar 07)
- Re: snort session reassembly problem Erek Adams (Mar 12)
- Re: snort session reassembly problem Edin Dizdarevic (Mar 07)
- Re: snort session reassembly problem Sven Fichtner (Mar 10)
- Re: snort session reassembly problem Erek Adams (Mar 10)
- Re: snort session reassembly problem Erek Adams (Mar 07)