Re: snort behind TAP & asynchronous_link

[Chris Green <cmg () sourcefire com>]

Chris Green <cmg () sourcefire com> writes:

> Holger.Woehle () arcor net writes:
>
> > Snort does not recognize the alerts with the flow:to_server,established
> > attributes.

Try build 199 from CVS.  I'll do a new beta this afternoon. I've
adjusted the sessions being marked as established when
asynchronous_link was set.
-- 
Chris Green <cmg () sourcefire com>
Warning: time of day goes back, taking countermeasures.



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users