Snort mailing list archives
log_flushed_streams with Stream5
From: phez asap <phez.asap () gmail com>
Date: Fri, 6 Mar 2009 10:03:06 -0600
Hi all I was using the "log_flushed_streams" option with stream4/flow to do a pcap dump of streams that triggered a rule. I am trying to switch over to using the Stream5 preprocessor but it does not seem to support this. It is very useful and I have to guess it is still possible to do this. Is there a new way that this is being set up now when using stream5? =Mike=
------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- log_flushed_streams with Stream5 phez asap (Mar 06)
- <Possible follow-ups>
- log_flushed_streams with Stream5 phez asap (Mar 07)
- Re: log_flushed_streams with Stream5 Joel Esler (Mar 17)