[Snort-users] HTTP reassembly problem

waldo kitty wkitty42 at ...14940...
Wed Oct 10 16:41:16 EDT 2012


On 10/10/2012 12:28, Russ Combs wrote:
[...]
> You can also add show_rebuilt_packets to stream5_global and use with -A cmg to
> see reassembled packets so you know how to tweak your rule.

i'll bet that this is the option that João Lima is looking for...

1. will this also cause them to be logged in the file(s)??
2. what version of snort did this option first appear in?




More information about the Snort-users mailing list