Re: Snort.org Blog: Snort 2.9.1 beta coming soon!

[Joel Esler <jesler () sourcefire com>]

On Jun 13, 2011, at 12:13 PM, Russ Combs wrote:

> Does the HTTP, SMTP, etc. logging take place in its own thread, or
> does it block the detection thread?
>
> No - logging is in the main thread

It is included in the unified2 output file, use the u2spewfoo tool included with Snort to see this.

Barnyard2 developers (Snorby et all), if they want to to include this output in their tools, will have to update to 
handle this new output.

Joel

------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel