Re: [Snort-inline-users] stream4 diff for 2.1.3

[Josh B. <jos...@li...>]

I think that drop functionality should be implemented as a configuration
option.  Something that can be turned on or off.

>
>
>
>
>
> This is the diff for stream4 and 2.1.3.  This has been working beautifully
> for me, I just changed my previous patch to deal with the addition of
> event
> queueing.  What do you guy's think of adding drops for bad traffic picked
> up by the decoder...  snort doesn't look at it because assumes that it is
> invalid traffic....  Should we add drop functionality to the decoder?
>
> Regards,
>
> Will
>
> (See attached file: spp_stream4-2.1.3.diff)


Thanks,
Josh Berry, CISSP
CTO, VP of Product Development
LinkNet-Solutions
469-831-8543
jos...@li...