Snort mailing list archives
Re: Adding "drop" in the msg output.
From: Avery Rozar <Avery.Rozar () i-techsupport com>
Date: Thu, 27 Mar 2014 14:07:18 +0000
Very cool, will surly look at this! On 3/26/14, 9:21 PM, "Joel Esler (jesler)" <jesler () cisco com> wrote:
The traffic is indicated if it is dropped in the unified2 output. It can be viewed using u2spewfoo. I don't know if any free GUI tools support that field. -- Joel Esler Sent from my iPhoneOn Mar 26, 2014, at 5:53, "Avery Rozar" <Avery.Rozar () i-techsupport com> wrote: I would like for the term ³drop² to be added to the msg field. For this to show up in alerts produced by barnyard2, would it also need to be added to sid-msg.map? ------------------------------------------------------------------------- ----- Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/13534_NeoTech _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Adding "drop" in the msg output. Avery Rozar (Mar 26)
- Re: Adding "drop" in the msg output. Joel Esler (jesler) (Mar 26)
- Re: Adding "drop" in the msg output. Jeremy Hoel (Mar 26)
- Re: Adding "drop" in the msg output. Avery Rozar (Mar 27)
- Re: Adding "drop" in the msg output. Joel Esler (jesler) (Mar 26)