[Snort-users] 1.6 look for 1.6.3

Fyodor fygrave at ...121...
Fri Aug 11 16:02:31 EDT 2000


~ :Doesn't matter too much to be, but FWIW, I'm partial to a blank line 
~ :in between entries.  Easier to parse and it follows the typical 
~ :blank-lines-separate-paragraphs format.  Snort's raw output will 

I personally also would prefer an extra blankline between packetprints,
easier to read raw log file too. :) Also it's easier to write parsers
indeed. 





More information about the Snort-users mailing list