[Snort-users] TCP Session logging with ACID
AJ Butcher, Information Systems and Computing
Alex.Butcher at ...11254...
Fri Apr 30 00:42:06 EDT 2004
--On 29 April 2004 07:36 -0700 jonasb at ...7872... wrote:
> how would a TAGged session appear in ACID?
You'll see the first packet with your alert, and the packets will be logged
as separate alerts with alert names of 'unknown alert' or somesuch.
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9
More information about the Snort-users