[Snort-users] HTTP reassembly problem

beenph beenph at ...11827...
Wed Oct 10 13:55:37 EDT 2012


On Wed, Oct 10, 2012 at 1:51 PM, João Lima
<joao.pedro.paulino.lima at ...11827...> wrote:
> No. I'm using output unified2
>
> In most cases I'm able to get the packet from the event.
>
> Only when reassembled packets are involved, the unified2Packet is missing.
>
> João Lima
And are you using snort >= 2.9.3.x?


-elz




More information about the Snort-users mailing list