[Snort-devel] UDP/ICMP Pseudo Session Tracking (like Argus)

Joshua Berry jberry at ...2712...
Mon Jun 6 08:53:43 EDT 2005

Are there any efforts within the community or snort development team
that anyone is aware of to include UDP/ICMP pseudo session tracking like
what Argus does?  Something based on a timer/timeout value to track
those connections and log them.

It would be really nice to have this within snort, rather than use Argus
specifically for tracking sessions.

Josh Berry | CISSP GCIA 
Information Security
If you spend more on coffee than on IT security, you will be hacked. 
What's more, you deserve to be hacked. 
     -- (Former) White House Cybersecurity adviser Richard Clarke 

More information about the Snort-devel mailing list