Snort mailing list archives

Input daq/patch for reading from daemonlogger output files


From: Bjørnar Ness <bjornar.ness () gmail com>
Date: Sun, 18 Dec 2011 19:08:23 +0100

Any plans for a input daq and modifications to snort to be able read
continously from the pcap output or daemonlogger (new file every X-MB).
Whis would allow for snort restart without loosing packets.
DAQ should keep a progress file sililar to barnyard2's unified2 "waldo".


--
Bj(/)rnar

------------------------------------------------------------------------------
Learn Windows Azure Live!  Tuesday, Dec 13, 2011
Microsoft is holding a special Learn Windows Azure training event for 
developers. It will provide a great way to learn Windows Azure and what it 
provides. You can attend the event by watching it streamed LIVE online.  
Learn more at http://p.sf.net/sfu/ms-windowsazure
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!


Current thread: