Snort mailing list archives
Re: profiling
From: "Carter Waxman (cwaxman)" <cwaxman () cisco com>
Date: Thu, 3 Apr 2014 15:08:28 +0000
Hello, You are correct. All of the statistics you listed track Stream5. -Carter On 4/3/14 10:33 AM, "simegnew yihunie" <syihunie () gmail com> wrote:
Hey Guys, I enabled profile enabling of preprocessors and test the snort. In the table there are s5, s5tcpState, s5tcpFlush, s5tcpProcessRebuilt, s5tcpBuildPacket, s5tcpData,s5tcpPacketInsert, s5tcpNewSess. Are all these stream preprocessors or other? Any one who have any idea about this preprocessors layer ? Sincerely, S.y -------------------------------------------------------------------------- ---- _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- profiling simegnew yihunie (Apr 03)
- <Possible follow-ups>
- profiling simegnew yihunie (Apr 03)
- Re: profiling Carter Waxman (cwaxman) (Apr 03)
- Message not available
- Re: profiling Carter Waxman (cwaxman) (Apr 04)
- Re: profiling Carter Waxman (cwaxman) (Apr 03)
- profiling simegnew yihunie (Apr 03)