[Bro] Finding SYNs...

David Hoelzer dhoelzer at sans.org
Mon Sep 8 06:36:31 PDT 2014


Good morning!

I’m curious as to whether or not an invalid checksum as a result of offloading would prevent the tcp_SYN_packet event from firing…?  I took a cursory look but thought it might be faster to just ask. :)

Thanks!



More information about the Bro mailing list