Re: answering machine

        Hello,

On Tue, Apr 08, 2003 at 07:09:08PM +0200, Jacky Buyck wrote:
> Hi all.
> Just a question about this. Can we consider this function like a help to

That is exactly where I'd like to go :)
This will be part of a stateless engine, but some part of it are needed for a more complex (aka stateful) engine to help with connexion tracking for instance.

> Let me explain the ideas : consider a network data exchange (TCP

That is exactly what I am working on (TCP I mean, and the sample file is called tcp_handshake.c)

But, there is another very efficient tool to handle TCP stream reassembly and IP fragmentation, libnids :

http://www.packetfactory.net/projects/libnids/

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

What I intend to do here is to detect the proper SYN|ACK when a SYN has been sent (for instance), nothing more.

> It could be great.

I have some internal change to do again, some things I want to test/change before releasing the TCP part (which is almost done), and then, I'll go to UDP.

        Fred Raynal

>
>
>
>
> ----- Original Message -----