Feature #752
closed
Improve checksum detection algorithm
Added by Eric Leblond about 11 years ago.
Updated over 10 years ago.
Description
Current detection algorithm is using the rate (TCP pkt with valid checksum)/(total nb of packet on interface). We should switch to a full TCP rate with (TCP pkt with valid checksum)/(total nb of TCP packets on interface).
- Status changed from New to Assigned
- Assignee set to Eric Leblond
- Target version set to 1.4.1
- Target version changed from 1.4.1 to 2.0beta1
- Status changed from Assigned to Closed
It is not a real issue if we are using TCP against total number of packets. It should give a correct idea on most systems.
The major point here is that it is not implemented in pcap file leading to a high number of users with detection issue. I propose to implement it for pcap file running mode. I'm thinking about inverting the logic for pcap file to non tag as invalid packet before the packet count is reached. Once reached, we switch mode.
- Status changed from Closed to Assigned
Reopened on Eric's request.
- % Done changed from 0 to 90
- Target version changed from 2.0beta1 to 2.0beta2
- Status changed from Assigned to Closed
Also available in: Atom
PDF