© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
bbfa235
(Get the code!)
That's all about libnids.
If you read libnids docs carefuly, you'll find that it reconstructs a TCP session only if it catched the start of the TCP connection and if the connection was closed properly.
In the other words it is nesessary for dsniff to be on a job when you start sniffing.