Re: unified2_extra_data

[Victor Roemer <vroemer () sourcefire com>]

Hi Brad,

Simplest one I can think of would be

config log_ipv6_extra_data

A full list can be found in the Snort manual if you search for "Extra Data
Configurations".

Although it may be to late to benefit your project, we've also
(recent-ish-ly) documented
the Unified2 file format (section 5.3 in the manual I think).


Victor

------------------------------------------------------------------------------
Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
much more. Get web development skills now with LearnDevNow -
350+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
SALE $99.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122812

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!