openbsd-ports/net/snort
lteo ebad481f50 Due to checksum offload, Snort might see bad checksums in outbound
packets since those checksums are not calculated until after Snort sees
those packets.

This causes Snort to discard those packets instead of processing them,
which in turn prevents Snort from triggering alerts for them.

To fix this, set checksum_mode to "none" in snort.conf to disable
Snort's checksum verification feature.

Looks OK to maintainer Markus Lude.
2014-06-04 03:17:12 +00:00
..
patches Due to checksum offload, Snort might see bad checksums in outbound 2014-06-04 03:17:12 +00:00
pkg
distinfo
Makefile Due to checksum offload, Snort might see bad checksums in outbound 2014-06-04 03:17:12 +00:00