[Snort-users] log single packet vs reassmbled stream
neo_ait at ...131...
Sun Oct 3 20:45:59 EDT 2004
If in a stream a packet got a alert then will the packet got logged or the stream got logged... or both of them get logged ??? If strem4 preprocessor is enabled.....
What i see is that only the alerted packet is logged.... Is there any option to enable the logging of the entire reassembled packet ?????
thanks in advance
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users