Talk:Ares

From Protocolinfo

Jump to: navigation, search

How many packets (or rather how many bytes of data) need to be collected (TCP reasssembly) before applying this pattern?

The first TCP packet with data in it should be sufficient, I believe. This is 5 bytes, according to the pattern file. Sysop 09:06, 7 Aug 2006 (PDT)
Retrieved from "http://www.protocolinfo.org/wiki/Talk:Ares"