Re: snort.stats file documentation

[Edward Bjarte Fjellskål <edward.fjellskal () redpill-linpro com>]

Eoin Miller wrote:
> I am probably just missing this from somewhere obvious, but can someone
> point me in the direction of the docs on the snort.stats file? I was
> able to scrounge up what the first 48 columns are from someones page,
> but what the last 20 are or if this is even 100% accurate, I have no clue.
>
> http://www.grotto-group.com/~gulfie/projects/analysis/gpss.subpage.html

I have used the source in the past. Doc not up2date:
look into: snort-2.8.4/src/preprocessors/perf-base.c

search for: "Log Base Per Stats to File for Use by the MC"
etc.

e


------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users