[Snort-users] question about TAG
nipsy at ...5072...
Thu Nov 13 06:20:10 EST 2003
On 13 Nov 2003, Slighter, Tim wrote:
> Does the use of TAG have any prequisites from the preprocessors such as
> stream4 ?
> TAG used to work and the only changes made since then has been to disable
> stream4 and now the TAG feature no longer works.
Speaking of which, and I apologize for not answering any
questions here and instead just show up with more demands, but it
would be nice if a dependency tree of some kind could be made in
the docs or someplace else appropriate. I've often wondered, in
an attempt to scale back processing to only the things I know I
need, whether turning off something like stream4 is going to hose
the rest of my preprocessors I know I need to be using for some
There are at least two of us who would like to see such
information. :) Thanks...
Mark Nipper e-contacts:
Computing and Information Services nipsy at ...5072...
Texas A&M University http://ops.tamu.edu/nipsy/
College Station, TX 77843-3142 AIM/Yahoo: texasnipsy ICQ: 66971617
(979)575-3193 MSN: nipsy at ...5072...
-----BEGIN GEEK CODE BLOCK-----
GG/IT d- s++:+ a- C++$ UBL+++$ P--->+++ L+++$ E---
W++ N+ o K++ w(---) O++ M V(--) PS+++(+) PE(--) Y+
PGP++(+) t 5 X R tv b+++ DI+(++) D+ G e h r++ y+(**)
------END GEEK CODE BLOCK------
---begin random quote of the moment---
"We enter into life naked and howling, covered with blood. The
fun doesn't have to end there".
-- _The Book of Madness_
----end random quote of the moment----
More information about the Snort-users