Snort mailing list archives
Re: conversation preprocessor and byte-count-based alerts
From: Chris Green <cmg () snort org>
Date: Mon, 18 Nov 2002 17:48:31 -0500
"Cloppert, Michael" <Michael.Cloppert () 53 com> writes:
In the (now somewhat outdated) documentation v.1.9.1 on snort.org,
It's actually fairly up to date for the soon to be released 1.9.1.
the potential for byte-count-based alerts is mentioned in the "conversation" preprocessor section. Is this now possible?
Nope.
If not, when can we expect it to be a feature?
I need to find time to revist conversation... -- Chris Green <cmg () sourcefire com> "I'm beginning to think that my router may be confused." ------------------------------------------------------- This sf.net email is sponsored by: To learn the basics of securing your web site with SSL, click here to get a FREE TRIAL of a Thawte Server Certificate: http://www.gothawte.com/rd524.html _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- conversation preprocessor and byte-count-based alerts Cloppert, Michael (Nov 18)
- Re: conversation preprocessor and byte-count-based alerts Chris Green (Nov 18)