[Snort-users] log single packet vs reassmbled stream

Thomas Anderson neo_ait at ...131...
Sun Oct 3 20:45:59 EDT 2004


Hi all,
 
If in a stream a packet got a alert then will the packet got logged or the stream got logged... or both of them get logged ??? If strem4 preprocessor is enabled..... 
 
What i see is that only the alerted packet is logged.... Is there any option to enable the logging of the entire reassembled packet ????? 
 
thanks in advance
Thomas

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20041003/60be7eec/attachment.html>


More information about the Snort-users mailing list