Question about http_inspect

[Asim Jamshed <asim.jamshed () gmail com>]

Hi,

I was going through the Snort manual and it says
that the http inspect module is stateless (analyzes
flows on a per-packet basis). Is that right? I was
wondering why it can use stream5 module and
perform stateful management like ftp, telnet and
smtp protocols?

Thanks,
--Asim

------------------------------------------------------------------------------
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!