[Snort-users] Stream5 - UDP

Matt Olney molney at ...1935...
Wed Jun 9 08:14:55 EDT 2010


That option supports the flow: to_server; rule option for UDP rules.

Sent from my iPhone

On Jun 9, 2010, at 7:59 AM, Parag Pote <pipsparag at ...131...> wrote:

> Hi All,
>
> Can somebody tell me why do we need to track_udp in stream5? I case  
> of TCP, it make sense since it has valid initial and closure  
> handshake. Is it Ok to set track_udp to no?
>
> Also, is there any way to restrict total memory consumed by snort to  
> some limit? I mean any configuration option where we can specify say  
> X MB.
>
> Any help in this regard is appreciated.
>
> Rgds,
> Parag
>
>
>
>
>
> --- 
> --- 
> --- 
> ---------------------------------------------------------------------
> ThinkGeek and WIRED's GeekDad team up for the Ultimate
> GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
> lucky parental unit.  See the prize list and enter to win:
> http://p.sf.net/sfu/thinkgeek-promo
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list