Snort mailing list archives
When will be multiple consecutive sessions be captured when tag is being used with sessions?
From: Maxim <hittlle () 163 com>
Date: Fri, 17 Feb 2017 17:52:09 +0800 (CST)
Hi all, I noticed the following lines in file tag.c of snort 2.9.9.0 source repository, | // TBD when tags leverage sessions, tag nodes can be freed at end // of session. then we can configure this to allow multiple // (consecutive) sessions to be captured. static const unsigned s_max_sessions = 1; Does that mean currently snort can handle only 1 session and capture corresponding packets at a time? Many thanks. |
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- When will be multiple consecutive sessions be captured when tag is being used with sessions? Maxim (Feb 17)