Re: When will be multiple consecutive sessions be captured when tag is being used with sessions?

[Russ <rucombs () cisco com>]

Only one tag:session, exclusive at a time.

On 2/17/17 4:52 AM, Maxim wrote:
> Hi all,
> I noticed the following lines in file tag.c of snort 2.9.9.0 source 
> repository,
> // TBD when tags leverage sessions, tag nodes can be freed at end // 
> of session. then we can configure this to allow multiple // 
> (consecutive) sessions to be captured.
> static const unsigned s_max_sessions = 1;
> Does that mean currently snort can handle only 1 session and capture 
> corresponding packets at a time? Many thanks.
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!