Date: Wed, 20 Aug 2008 15:09:50 GMT From: Rui Paulo <rpaulo@FreeBSD.org> To: Perforce Change Reviews <perforce@FreeBSD.org> Subject: PERFORCE change 147929 for review Message-ID: <200808201509.m7KF9oZ2096907@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=147929 Change 147929 by rpaulo@rpaulo_epsilon on 2008/08/20 15:09:48 Fill this file with information. Affected files ... .. //depot/projects/soc2008/rpaulo-tcpad/README#2 edit Differences ... ==== //depot/projects/soc2008/rpaulo-tcpad/README#2 (text+ko) ==== @@ -1,1 +1,14 @@ -TCP anomaly detector project +TCP Anomaly Detector +-------------------- + +TCP anomaly detector, tcpad for short, monitors your TCP connections via +libpcap(3) and tries verify the correctness of the TCP stacks. + +We do this by emulating virtual TCP stacks for each end. Whenever an error +occurs, we dump the packets into a pcap(3) file and the state of each virtual +TCP stack. +With this information, you can see if there is indeed a problem with the +operating system you are analyzing or if it's just a false positive from +tcpad. + +-- Rui Paulo <rpaulo@FreeBSD.org>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200808201509.m7KF9oZ2096907>