Re: [Snort-inline-users] out-of-order TCP packets limit

[Victor J. <li...@in...>]

Mike Smith wrote:
> Hi, I keep getting this alert with snort v2.6  
>
> "(spp_stream4) TCP out-of-order packets limit reached for stream"
>
> And is essentially dropping payloads with non-ASCII characters, how can
> I disable this ?
>
>   

Hi Mike, sorry for not responding earlier. The alerts are not related
with the payload of the TCP packets. I've just written a blogpost about
how the handling of out of order packets in Snort_inline works:
http://www.inliniac.net/blog/2007/07/30/snort_inline-and-out-of-order-packets.html

Cheers,
Victor