[Bro-Dev] Hui Lin_Binpac: handle incremental input for flowunit

Adam J. Slagell slagell at ncsa.illinois.edu
Thu Jul 21 14:05:39 PDT 2011


On Jul 20, 2011, at 11:56 PM, Seth Hall wrote:

> I don't think you can use datagram if the protocol you're working on is TCP since the packets could be fragmented or out of order.  I'd love to be proven wrong though....

Obviously, modbus-tcp was on tcp, but is DNP3?

------
Adam J. Slagell, CISSP
Sr. Security Engineer
National Center for Supercomputing Applications
University of Illinois at Urbana-Champaign
www.slagell.info
217.244.8965









More information about the bro-dev mailing list