Actions
Feature #603
closed
VJ
VJ
stream: detect overlapping data in stream reassembly
Feature #603:
stream: detect overlapping data in stream reassembly
Effort:
Difficulty:
Label:
Description
Resending of different data in TCP streams is a way to attempt to evade the IDS/IPS. Detect such resends.
Actions