|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: feature req: more info on TCP session for content filter and/or policy delegation server
From: Mark Martinec (Mark.Martinec+postfix
ijs.si)
Date: Sun Jan 02 2005 - 18:34:22 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
> Neither source port nor destination port are relevant for
> client fingerprinting.
The source port number (i.e. the whole TCP quadruple) is needed to be able
to distinguish between boxes behind NAT, e.g. when they are firewalled.
Mark
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]