Re: [Snort-inline-users] Snort-Inline and droping fragmented attaques

[Will M. <wil...@gm...>]

If you are tracking state with netfilter, it performs fragment reassembly
for you.

Regards,

Will

On 10/1/06, James G <har...@ho...> wrote:
>
>     Hi all,
>
> My question is : Can Snort_inline Drop a fragmented attaque that has been
> reassembled by Frag3? Or does it only g=E9nerate an alert on it?
>
> I mean, does Frag 3 forward the fragments before therest of the systeme
> analyses the reassembled paquet??
>
> Regards,
>
>
>
> ------------------------------
> MSN Hotmail sur i-mode=99 : envoyez et recevez des e-mails depuis votre
> t=E9l=E9phone portable ! <http://g.msn.com/8HMBFR/2740??PS=3D47575>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share
> your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourceforge&CID=3D=
DEVDEV
>
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>
>
>