[Bro] about "reassembles IP fragments"

Christian Kreibich christian at whoop.org
Fri Oct 22 03:29:42 PDT 2004


On Fri, 2004-10-22 at 09:16, Robin Sommer wrote:
> On Fri, Oct 22, 2004 at 09:56 +0800, cliff wrote:
> 
> > Howerver,I can't find the implementation detail from source
> > code,i.e."verifying the IP header checksum" and "reassembles IP
> > fragments". 
> 
> The fragment reassembler is in Frag.*. Checksums are verified at
> multiple locations; try grepping for "_checksum"

Hrm. Maybe I should learn to read my mails before replying :)

Cheers,
Christian.
-- 
________________________________________________________________________
                                          http://www.cl.cam.ac.uk/~cpk25
                                                    http://www.whoop.org




More information about the Bro mailing list