In the state based fuzzing, the fuzzer always fuzzes the first packet sent in a given state. We may want to let a few packets go, so we can have a chance to explore more complex server states. The number of skipped states may be a function of the max number of packets sent for a state, so the first step might be to monitor this number.
In the state based fuzzing, the fuzzer always fuzzes the first packet sent in a given state. We may want to let a few packets go, so we can have a chance to explore more complex server states. The number of skipped states may be a function of the max number of packets sent for a state, so the first step might be to monitor this number.