Snort mailing list archives
preprocessor perfmonitor fields
From: "Lee Clemens" <snort () leeclemens net>
Date: Thu, 17 Mar 2005 03:43:43 -0500
I'm outputting perfmonitor to a file and I can't see any documentation as to what fields are what. Since it is to a file, the manual just says that not all fields are recorded (from the bulleted list above). As per development, maybe the first field could simply be comma delimited field names, depending on the options set in snort.conf? I wouldn't mind sorting through a few of these if it outputted did this every time the service starts...but for now, is there a way I can tell what the values represent? btw, I'm using windows and Snort running as-is (no ACID, BASE, etc), so I'm not sure what console output would do... ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- preprocessor perfmonitor fields Lee Clemens (Mar 17)
- Re: preprocessor perfmonitor fields Alejandro Flores (Mar 17)
- RE: preprocessor perfmonitor fields Lee Clemens (Mar 17)
- Re: preprocessor perfmonitor fields Alejandro Flores (Mar 17)