Stream4 keepstats

[pmawson () deloitte co nz]

Hi all

Have a question about the session.log
generated by stream4 statistics (I think)

below is a session stat cut from this log.  One of many.

What I can't figure out is how the log will register 2 packets or 1 packet
but will say 0 bytes were sent (see below)?

[*] Session stats:
   Start Time: 11/22/01-10:39:26   End Time: 11/22/01-10:39:29
   Server IP: 1.2.3.4  port: 2935  pkts: 2  bytes: 0
   Client IP: 4.3.2.1  port: 80  pkts: 1  bytes: 0

Is there anyone out there with intimate knowledge of stream4 statistics that
can help me with this?

Thanks

Phill




************************************************************
CAUTION:  This e-mail and any attachment(s) contains
information that is both confidential and possibly legally
privileged.  No reader may make any use of its content
unless that use is approved by Deloitte separately in writing.
Any opinion, advice or information contained in this e-mail
and any attachment(s) is to be treated as interim and
provisional only and for the strictly limited purpose of the
recipient as communicated to us.  Neither the recipient nor
any other person should act upon it without our separate
written authorisation of reliance.
If you have received this message in error please notify us
immediately and destroy this message.  Thank you.
Deloitte Touche Tohmatsu
Internet: www.deloitte.co.nz
************************************************************ 

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users