[Snort-users] log_flushed_streams with Stream5

phez asap phez.asap at ...11827...
Fri Mar 6 11:03:06 EST 2009

Hi all

I was using the "log_flushed_streams" option with stream4/flow to do a pcap
dump of streams that triggered a rule. I am trying to switch over to using
the Stream5 preprocessor but it does not seem to support this. It is very
useful and I have to guess it is still possible to do this. Is there a new
way that this is being set up now when using stream5?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20090306/e6e86223/attachment.html>

More information about the Snort-users mailing list