[Snort-users] Grouping connections

Richard Bejtlich taosecurity at ...11827...
Mon Apr 27 11:42:56 EDT 2009


2009/4/22 Leon Ward <seclists at ...14165...>:
> Hi.
>
> Sorry I don't think I understand what you are asking. Can you share the goal
> you are trying to achieve rather than the method you are trying to resolve
> it by?
>

I think Leon has the right idea.  What is the overall goal of this
logging?  I doubt you are the first person to try to solve whatever
problem you are facing.  :)

Sincerely,

Richard




More information about the Snort-users mailing list