Snort mailing list archives
Re: Adding "drop" in the msg output.
From: "Joel Esler (jesler)" <jesler () cisco com>
Date: Thu, 27 Mar 2014 01:21:26 +0000
The traffic is indicated if it is dropped in the unified2 output. It can be viewed using u2spewfoo. I don't know if any free GUI tools support that field. -- Joel Esler Sent from my iPhone
On Mar 26, 2014, at 5:53, "Avery Rozar" <Avery.Rozar () i-techsupport com> wrote: I would like for the term “drop” to be added to the msg field. For this to show up in alerts produced by barnyard2, would it also need to be added to sid-msg.map? ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/13534_NeoTech _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Attachment:
smime.p7s
Description:
------------------------------------------------------------------------------
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Adding "drop" in the msg output. Avery Rozar (Mar 26)
- Re: Adding "drop" in the msg output. Joel Esler (jesler) (Mar 26)
- Re: Adding "drop" in the msg output. Jeremy Hoel (Mar 26)
- Re: Adding "drop" in the msg output. Avery Rozar (Mar 27)
- Re: Adding "drop" in the msg output. Joel Esler (jesler) (Mar 26)