[Snort-users] Query on processor(frag2)

Dear friends,

I have one question on processors(frag2).
As I know, frag2 can rebuild each packet from the
pieces and passes the full packet through for
detection once the the process is done,right?
However, where did snort rebuild the packets? in
memory? or in harddisk?
If it rebuilds in memory, then will the memory be
crashed? If it rebuilds in harddisk, then will it be
attacked(as the file was run)?

Happy New Year!
Fred

__________________________________________________ _______
Shining Friends¡B¦n¤ß¦n³ø¡B·³¤ë¦pºq...
®öº©¹aÁn ±¡¤ß³sô
http://ringtone.yahoo.com.hk/


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users