[Bro] Check tcp sequence number ?

[Christian Kreibich]

On Tue, 2004-11-30 at 06:48, rmkml wrote:
> Hi,
> 
> Bro 09a7 check/verify tcp sequence number ?

Yep sure -- you cannot do flow reassembly (which is necessary for any
analysis beyond the packet level) without looking closely at the TCP
sequence numbers.

Cheers,
Christian.
-- 
________________________________________________________________________
                                          http://www.cl.cam.ac.uk/~cpk25
                                                    http://www.whoop.org