Snort mailing list archives
Re: TCP Session logging with ACID
From: "AJ Butcher, Information Systems and Computing" <Alex.Butcher () bristol ac uk>
Date: Fri, 30 Apr 2004 08:40:16 +0100
--On 29 April 2004 07:36 -0700 jonasb () alum rpi edu wrote:
how would a TAGged session appear in ACID?
You'll see the first packet with your alert, and the packets will be logged as separate alerts with alert names of 'unknown alert' or somesuch.
Thanks! B
Best Regards, Alex. -- Alex Butcher: Security & Integrity, Personal Computer Systems Group Information Systems and Computing GPG Key ID: F9B27DC9 GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9 ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10gGet certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- TCP Session logging with ACID jonasb (Apr 29)
- Re: TCP Session logging with ACID AJ Butcher, Information Systems and Computing (Apr 30)