[Snort-devel] stream4 vs. dsize: how to spot an overflow?
There are many signatures that are designed to spot buffer overflows.
note, "useful for dsize and stream4".
packets, we don't see it.
reassembled stream of minimum size N?"
What does one do in 2.0?