Snort mailing list archives
UDP/ICMP Pseudo Session Tracking (like Argus)
From: "Joshua Berry" <jberry () PENSON COM>
Date: Mon, 6 Jun 2005 10:52:45 -0500
Are there any efforts within the community or snort development team that anyone is aware of to include UDP/ICMP pseudo session tracking like what Argus does? Something based on a timer/timeout value to track those connections and log them. It would be really nice to have this within snort, rather than use Argus specifically for tracking sessions. Josh Berry | CISSP GCIA Information Security 214-765-1296 -------------------------------------------------------------------- If you spend more on coffee than on IT security, you will be hacked. What's more, you deserve to be hacked. -- (Former) White House Cybersecurity adviser Richard Clarke ------------------------------------------------------- This SF.Net email is sponsored by: NEC IT Guy Games. How far can you shotput a projector? How fast can you ride your desk chair down the office luge track? If you want to score the big prize, get to know the little guy. Play to win an NEC 61" plasma display: http://www.necitguy.com/?r _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- UDP/ICMP Pseudo Session Tracking (like Argus) Joshua Berry (Jun 06)