[Bro] - MTU and defragmentation
william de ping
bill.de.ping at gmail.com
Wed Dec 6 08:23:19 PST 2017
I wonder what happens if my mtu is set to 1500 (default) and a jumbo TCP or
UDP packet is sent to Bro's monitored interface.
Will Bro parse only the packet containing the IP header ?
>From my tests I see that Bro does not defragment the packets by default,
any flag I should use for that ?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro