Greetings. Does TCP stream reassembly algorithm need TCP SACK processing for completeness ? Are there scenarios that an IDS/IPS would miss an attack if it does not take the selective acks into consideration.
Any comments/opinions/pointers is appreciated. Thanks ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
