Project

General

Profile

Actions

Feature #603

closed

stream: detect overlapping data in stream reassembly

Added by Victor Julien about 12 years ago. Updated about 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Resending of different data in TCP streams is a way to attempt to evade the IDS/IPS. Detect such resends.

Actions

Also available in: Atom PDF