Snort mailing list archives

Applying a rule on entire session

From: Dennis George <easyeinfo () yahoo com>
Date: Tue, 7 Sep 2004 20:48:18 -0700 (PDT)

Hi all,
 
Is it possible to apply a particular rule only after catching the entire session, not on every packet............ ??
 
Thanks in advance........
Dennis

                
---------------------------------
Do you Yahoo!?
Express yourself with Y! Messenger! Free. Download now.

Current thread:

Applying a rule on entire session Dennis George (Sep 07)
- Re: Applying a rule on entire session Alex Butcher, ISC/ISYS (Sep 08)
  - Re: Applying a rule on entire session Dennis George (Sep 08)
    - Re: Applying a rule on entire session Alex Butcher, ISC/ISYS (Sep 08)
- <Possible follow-ups>
- RE: Applying a rule on entire session Mohammad Abdel Hady (Sep 08)