Re: Stream5 - UDP

[Matt Olney <molney () sourcefire com>]

That option supports the flow: to_server; rule option for UDP rules.

Sent from my iPhone

On Jun 9, 2010, at 7:59 AM, Parag Pote <pipsparag () yahoo com> wrote:

> Hi All,
>
> Can somebody tell me why do we need to track_udp in stream5? I case  
> of TCP, it make sense since it has valid initial and closure  
> handshake. Is it Ok to set track_udp to no?
>
> Also, is there any way to restrict total memory consumed by snort to  
> some limit? I mean any configuration option where we can specify say  
> X MB.
>
> Any help in this regard is appreciated.
>
> Rgds,
> Parag
>
>
>
>
>
> --- 
> --- 
> --- 
> ---------------------------------------------------------------------
> ThinkGeek and WIRED's GeekDad team up for the Ultimate
> GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
> lucky parental unit.  See the prize list and enter to win:
> http://p.sf.net/sfu/thinkgeek-promo
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users