> > looking at snort. > > libnids is *perfect*, thank you :)
Does it handle lost segments well? I mean, when you never get a segment, will NIDS understand that, give up on the segment, and continue feeding the user with the rest of the stream? Similarly, does it track connections without capturing the Connection Establishment packet sequence? (Let's say I run an app using NIDS while a connection is already up. Will I get the data stream of this connection ?) > > Andy. > > -- > n: Andy Coates e: > [EMAIL PROTECTED] > - > This is the tcpdump-workers list. > Visit https://lists.sandelman.ca/ to unsubscribe. > ===== --ury - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
