[Snort-users] TCP Session logging with ACID

AJ Butcher, Information Systems and Computing Alex.Butcher at ...11254...
Fri Apr 30 00:42:06 EDT 2004


--On 29 April 2004 07:36 -0700 jonasb at ...7872... wrote:

> how would a TAGged session appear in ACID?

You'll see the first packet with your alert, and the packets will be logged 
as separate alerts with alert names of 'unknown alert' or somesuch.

> Thanks!
> B

Best Regards,
Alex.
-- 
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9






More information about the Snort-users mailing list