[reviving an old thread]
> > I think we should keep the default with strict checksum checking,
> > especially now that we have the new script that tells users if they seem to
> > have invalid checksums. I would rather push people down the right path as
> > much as possible.
>
> My thoughts too.
I'm struck by how often new users continue to get bitten by needing -C
due to checksum offloading. Would it work to provide checksum auto-sensing?
Something like: if upon reading from an interface the very first packet
has a checksum error, assume that -C is needed; verify this, though, for
the next N packets, just to be safe.
Vern
_______________________________________________
bro-dev mailing list
bro-dev@bro.org
http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev
