Re: unified code?

["Andrew R. Baker" <andrewb () snort org>]

smith wrote:
>  hi everybody,
>
> i am new in using snort and i dont really understand waht is unified
> code and what is its importance compared to tcpdump and how to view
> it ,the text editor gives strange code
> thanx in advance. 


The unified output system is designed to output both alerts and packet 
logs into a unified file for processing by a seperate utility.  Barnyard 
has been developed by the Snort team to process this file.  If you want 
to know more about the record format, have a look at spo_unified.c in 
the Snort source distribution.

-A



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Gadgets, caffeine, t-shirts, fun stuff.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users