[Oisf-devel] ip fragments

Victor Julien victor at inliniac.net
Sat Jul 2 07:05:02 UTC 2011


On 07/01/2011 08:37 PM, chetan loke wrote:
> Hello,
> 
> Quick question:
> 
> Suricata decoders can handle ip-fragments that arrive out-of-order,correct?
> 
> As long as the fragments(of the flow-tuple) get routed to the same
> socket we should be good, correct?

Yes, thats right.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------




More information about the Oisf-devel mailing list