[Snort-users] Session data, alerts, and barnyard

Ed Quackenbush equackenbush at ...289...
Mon Jun 10 14:41:02 EDT 2002


Hello all-

Is the session data for an alert made available for barnyard with the
unified format?  In spo_unified.c I do not see the session data being
written in AlertUnified, nor do I see where I would get the session data for
a barnyard output plugin in UnifiedAlertRecord.

Thanks,
Edward Quackenbush
equackenbush at ...289...




More information about the Snort-users mailing list