search

david415 / HoneyBadger

Quantum Insert detector/recorder
GNU General Public License v3.0
305 stars 39 forks source link

out of order packet reordering with injection detection of segment coalescing #7

Closed david415 closed 9 years ago

david415 commented 9 years ago

There is some excellent design in gopacket's tcpassembly that we can learn from here. I'd like to perform the packet reordering in a very similar way but with some extra checks for overlap comparison such that we can detect what I call out-of-order-injection attacks.

Much like tcpassembly and as per issue #3 we should use a page cache to avoid memory allocations.

david415 commented 9 years ago

done in this development feature branch https://github.com/david415/HoneyBadger/tree/ordered-coalesce-1