Re: [Snort-inline-users] Streams and Inline

[Will M. <wil...@gm...>]

every tcp segment.... In addition we also scan the unreassembled
packet before passing the verdict back to iptables.  That is only for
stream4inline of course ;-)...

Regards,

Will

On 8/27/07, Adayadil Thomas <ada...@gm...> wrote:
> Greetings.
>
> In the inline mode, does snort_inline do reassembly operation (for TCP
> packets) for every tcp segment OR does the reassembly happen only when
> a threshold (bytes) is reached?
>
> Thanks
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>