User Tools

Site Tools


pom:helper:tcp

helper_tcp

This helper provide TCP reassembly and reordering. It means that it will buffer packets that are received out of order and pass the in the right order to the rule processor. This way, the targets or any subsequent match don't have to care about the order of TCP packets since this helper ensure that packets are in the right order and not duplicate.

Parameters :

Name Default value Description
pkt_timeout30Number of seconds to wait between out of order packets.
conn_buffer64Maximum amount of data in KBytes that will be saved by connection while waiting for a missing packet. If the limit is reached, the missing packet is ignored and the rest of the packets are processed.
fill_gapsyesSpecifies if helper_tcp should try to fill gaps of missing packets. If set to yes, it will generate packets with zero filled payload.
pom/helper/tcp.txt · Last modified: 2012/10/24 16:15 by gmsoft