[Snort-users] log_flushed_streams with Stream5
phez.asap at ...11827...
Fri Mar 6 11:03:06 EST 2009
I was using the "log_flushed_streams" option with stream4/flow to do a pcap
dump of streams that triggered a rule. I am trying to switch over to using
the Stream5 preprocessor but it does not seem to support this. It is very
useful and I have to guess it is still possible to do this. Is there a new
way that this is being set up now when using stream5?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users