[Snort-users] UDP/ICMP Pseudo Session Tracking (like Argus)

Joshua Berry jberry at ...11848...
Mon Jun 6 08:53:28 EDT 2005


Are there any efforts within the community or snort development team
that anyone is aware of to include UDP/ICMP pseudo session tracking like
what Argus does?  Something based on a timer/timeout value to track
those connections and log them.

It would be really nice to have this within snort, rather than use Argus
specifically for tracking sessions.

 
Josh Berry | CISSP GCIA 
Information Security
214-765-1296
 
-------------------------------------------------------------------- 
If you spend more on coffee than on IT security, you will be hacked. 
What's more, you deserve to be hacked. 
     -- (Former) White House Cybersecurity adviser Richard Clarke 





More information about the Snort-users mailing list