Re: [Snort-inline-users] inline streams query --

[Victor J. <li...@in...>]

Adayadil Thomas wrote:
> Hello and greetings!
>
> http://www.inliniac.net/blog/?p=74 says --
>
>   
>> It implements a number of ideas from Vern Paxson on TCP reassembly,
>>     
> such as a >limit on >the number of out of order packets and bytes that
> are accepted in a stream.
>
> What are the other ideas ? (limit on out of order segments is one.)
>   
In the same line is the option to limit the number of sequence number
holes (option seq_holes). The last one is the option to normalize wscale
traffic we can't handle. See my blogpost on a discussion of this option:
http://www.inliniac.net/blog/?p=85

Hope this helps,
Victor