Project

General

Profile

Actions

Feature #603

closed

stream: detect overlapping data in stream reassembly

Added by Victor Julien over 11 years ago. Updated over 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

Resending of different data in TCP streams is a way to attempt to evade the IDS/IPS. Detect such resends.

Actions

Also available in: Atom PDF