[Snort-users] log_flushed_streams

phez asap phez.asap at ...11827...
Mon Mar 9 13:42:18 EDT 2009


Hi all

I was using the "log_flushed_streams" option with stream4/flow to do a pcap
dump of streams that triggered a rule. I am trying to switch over to using
the Stream5 preprocessor but it does not seem to support this. It is very
useful and I have to guess it is still possible to do this. Is there a new
way that this is being set up now when using stream5?

=Mike=
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20090309/044b7ef5/attachment.html>


More information about the Snort-users mailing list