Re: HTTP Inspect and packet reassembly

[Joel Esler <jesler () sourcefire com>]

Thanks. I got it!


Sent from my iPhone

On Oct 31, 2010, at 12:29 PM, Eoin Miller <eoin.miller () trojanedbinaries com> wrote:

> On 10/29/2010 1:19 PM, Joel Esler wrote:
> > It's handy, but it's not a pcap.  It's a ascii-based packet dump.  When we ask for a pcap, we need a file, with full 
> > session packet capture in it, with full snap length settings.
> >
> > Thanks though.
> >
> > J
> >
> >
> > On Oct 29, 2010, at 9:14 AM, L0rd Ch0de1m0rt wrote:
> >
> > > Joel: Eoin has pcap info in the blog post he references.
> Joel,
>
> I sent this issue in with PCAP to research () sourcefire com on 8/26. I 
> resent it to you and Matt Olney off list and please let me know if there 
> is anything else I can provide.
>
> -- Eoin
>
> ------------------------------------------------------------------------------
> Nokia and AT&T present the 2010 Calling All Innovators-North America contest
> Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
> $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
> Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
> http://p.sf.net/sfu/nokia-dev2dev
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-devel

------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel