stream4 reassembly bug

[Yonah Russ <yonah () jct ac il>]

Hi,
  I'm noticing a lot of P2P Gnutella Get mesages- when I look up the
packet payload in acid it looks exactly like web traffic that would
originate from our web proxy...

I noticed someone had the same problem a while back with snort 1.9 but
I'm running 2.0.0 build 72- could this be the same problem?

I also noticed that someone mentioned this could be a problem of dropped
packets.. afaik linux doesn't keep dropped packets statistics... how can
I determine if this is the problem?

thanks
-- 
Yonah Russ 
http://www.tikun-olam.net/



-------------------------------------------------------
This SF.net email is sponsored by: ObjectStore.
If flattening out C++ or Java code to make your application fit in a
relational database is painful, don't do it! Check out ObjectStore.
Now part of Progress Software. http://www.objectstore.net/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users