Re: conversation preprocessor and byte-count-based alerts

[Chris Green <cmg () snort org>]

"Cloppert, Michael" <Michael.Cloppert () 53 com> writes:

> In the (now somewhat outdated) documentation v.1.9.1 on snort.org, 

It's actually fairly up to date for the soon to be released 1.9.1.

> the potential for byte-count-based alerts is mentioned in the
> "conversation" preprocessor section.  Is this now possible?  

Nope.

> If not, when can we expect it to be a feature?

I need to find time to revist conversation...
-- 
Chris Green <cmg () sourcefire com>
"I'm beginning to think that my router may be confused."


-------------------------------------------------------
This sf.net email is sponsored by: To learn the basics of securing 
your web site with SSL, click here to get a FREE TRIAL of a Thawte 
Server Certificate: http://www.gothawte.com/rd524.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users