[Snort-devel] Snort preprocessor to log flows

Borja Marcos borjam at ...843...
Thu Oct 18 00:10:09 EDT 2001


On Wednesday 17 October 2001 20:54, you wrote:
> First of all, it tracks by server ip, client ip, server port, protocol.
> Not tracking by client port greatly reduces the number of flows it needs
> to track so it is pretty fast.

	http://www.qosient.com/argus




	Borja.




More information about the Snort-devel mailing list