[Snort-devel] Input daq/patch for reading from daemonlogger output files

Bjørnar Ness bjornar.ness at ...2499...
Sun Dec 18 13:08:23 EST 2011


Any plans for a input daq and modifications to snort to be able read
continously from the pcap output or daemonlogger (new file every X-MB).
Whis would allow for snort restart without loosing packets.
DAQ should keep a progress file sililar to barnyard2's unified2 "waldo".


--
Bj(/)rnar




More information about the Snort-devel mailing list