[Snort-devel] Binary (pcap) Logging Limited to 128M

Bamm Visscher bamm.visscher at ...2499...
Fri Jun 13 14:58:27 EDT 2008


I don't see a way to override this other than modifying the value at
compile time. Is that on purpose and if so, why?

output-plugins/spo_log_tcpdump.c
#define DEFAULT_LIMIT (128*M_BYTES)

Bammkkkk



-- 
sguil - The Analyst Console for NSM
http://sguil.sf.net




More information about the Snort-devel mailing list