When TCP Reassembly Gets Complicated

When analyzing network traffic, we rely on our tools to show us how a TCP stream was reassembled or to give us a list of HTTP websites accessed in a pcap file.

Our own Sr. Technology Specialist, Tom Peterson, spoke at SharkFest US 2019. He had a great experience and wanted to share his talk, “When TCP Reassembly Gets Complicated”, with our CloudShark community.

In this talk, learn how TCP is processed by different OS and tools, and how the differences could be used to hide malicious behavior.