Snort mailing list archives
Re: Session mixup by stream4
From: Sonali Gupta <sonali.gupta () gmail com>
Date: Wed, 9 Feb 2005 11:01:04 +0530
Hi Matt I did check for packet drops, and snort statistics showed that there was no packet drop in either case. Regards Sonali On Tue, 08 Feb 2005 11:54:41 -0500, Matt Kettler <mkettler () evi-inc com> wrote:
At 04:30 AM 2/8/2005, Sonali Gupta wrote:Is there any difference between the session reassemble real time and session reassemble using r option.There's little difference between the two, the only significant difference I know if is that there's no packet drops when using -r. Did you check for packet drops in your earlier tests? Did snort B drop more packets than A?
------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_ide95&alloc_id396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Session mixup by stream4 gupta_sonali (Feb 07)
- <Possible follow-ups>
- Session mixup by stream4 Sonali Gupta (Feb 08)
- Re: Session mixup by stream4 Matt Kettler (Feb 08)
- Re: Session mixup by stream4 Sonali Gupta (Feb 08)
- SNORT file data.MYD too large corrado . riva (Feb 09)
- Re: SNORT file data.MYD too large Edin Dizdarevic (Feb 09)
- Re: Session mixup by stream4 Matt Kettler (Feb 08)