[Bro] Bug (?) in TCP_Contents

José María González chema at cs.berkeley.edu
Wed Oct 6 21:12:02 PDT 2004


Hi, 

When Bro sees an ACK for a packet before the packet 
itself (packet reordering), it considers that it already 
delivered the packet to the upper protocols, because 
it's acked. (see TCP_Contents.cc, line 272). 

I was wondering whether this is the intended behavior 
or it's a bug. 

-Chema



More information about the Bro mailing list