Re: [Snort-inline-users] [PATCH] fix restart function called after a SigHUP

[William M. <Wil...@kc...>]

The more requests that come in, it's getting conceptually harder to mee=
t
them modding the stream4 that comes with vanilla snort.  I guess I've f=
ound
my research project for my cert, I'll start rewriting stream4 as a sepa=
rate
preproc for snort_inline.   What do you guy's think about this?  If thi=
s is
cool with everyone, just send me what you would like to see.  As far as=

reassembly goes how long do you think we should store packets in memory=

from the stream?  What is a good length to keep state?   Rob, would you=
 be
alright with this?

Regards,

Will=