[Snort-users] log single packet vs reassmbled stream

Thomas Anderson neo_ait at ...131...
Sun Oct 3 20:45:59 EDT 2004

Hi all,
If in a stream a packet got a alert then will the packet got logged or the stream got logged... or both of them get logged ??? If strem4 preprocessor is enabled..... 
What i see is that only the alerted packet is logged.... Is there any option to enable the logging of the entire reassembled packet ????? 
thanks in advance

Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20041003/60be7eec/attachment.html>

More information about the Snort-users mailing list