[Bro] handle out of order and retransmitted packets in offline trace

Vern Paxson vern at icir.org
Wed May 18 10:43:20 PDT 2011

> Is that function of reassembling TCP bytestream embedded in event engine and
> enabled by default when using http-rewriter.bro

It's fundamental to how the event engine works.


More information about the Bro mailing list