[Snort-users] snort behind TAP & asynchronous_link

Chris Green cmg at ...1935...
Thu Aug 15 07:11:04 EDT 2002


Chris Green <cmg at ...1935...> writes:

> Holger.Woehle at ...2701... writes:
>
>>
>> Snort does not recognize the alerts with the flow:to_server,established
>> attributes.

Try build 199 from CVS.  I'll do a new beta this afternoon. I've
adjusted the sessions being marked as established when
asynchronous_link was set.
-- 
Chris Green <cmg at ...1935...>
Warning: time of day goes back, taking countermeasures.





More information about the Snort-users mailing list