[Snort-devel] Snort.org Blog: Snort 2.9.1 beta coming soon!

Joel Esler jesler at ...402...
Mon Jun 13 12:45:38 EDT 2011


On Jun 13, 2011, at 12:13 PM, Russ Combs wrote:

> Does the HTTP, SMTP, etc. logging take place in its own thread, or
> does it block the detection thread?
> 
> No - logging is in the main thread

It is included in the unified2 output file, use the u2spewfoo tool included with Snort to see this.

Barnyard2 developers (Snorby et all), if they want to to include this output in their tools, will have to update to handle this new output.

Joel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20110613/92706e33/attachment.html>


More information about the Snort-devel mailing list