Re: barnyard (Payload)

[Jens Krabbenhoeft <tschenz-snort-users () noris net>]

Hi alwin,

> output aler_unified: filename snort.alert, limit 128

As Bamm Visscher wrote some days ago, you have to use the log_unified
output-plugin to get the payload data. 

Bamm's mail:
http://marc.theaimsgroup.com/?l=snort-users&m=103348869114529&w=4

HTH,

        Jens


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users