[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-users
Subject:    Re: [snort] FW: Windows DoS code (jolt2.c)
From:       Dragos Ruiu <dr () dursec ! com>
Date:       2000-05-27 6:46:12
[Download RAW message or body]

On Fri, 26 May 2000, you wrote:
> On Fri, 26 May 2000, Dragos Ruiu wrote:
> > -Fragmented packets where some fragments fall 
> >   outside the range defined by the last fragment..
> 
> What do you mean..missed one?  That can happen normally.
> 

fragment(n) = id q, offset(x), fragment bit
fragment(n+m) = id q, offset(x-y), no fragment bit (end of fragments)

where n, m, q, x, and y are positive, non-zero, integers.

-- 
dursec.com / kyx.net - we're from the future      http://www.dursec.com

[prev in list] [next in list] [prev in thread] [next in thread]