[Snort-users] Unknown POP3 Command

James Lay jlay at ...13475...
Wed Jun 5 14:00:14 EDT 2013


On 2013-06-05 11:54, Josh Bitto wrote:
> James,
>
> This is what I have for output plugins.
>
> ###################################################
> # Step #6: Configure output plugins
> # For more information, see Snort Manual, Configuring Snort - Output 
> Modules
> ###################################################
>
> # unified2
> # Recommended for most installs
> # output unified2: filename merged.log, limit 128, nostamp,
> mpls_event_types, vlan_event_types
>
>
> They are commented out, but I would have to do some research on
> manually editing the conf. Since snort is integrated into pfsense
> configuring and editing the config file is done differently than if
> you had a dedicated linux box.
>
> Josh

Ah that's too bad :(  Yea..without the info that unified or pcap 
output, there's no way to tell exactly what was passed.

James




More information about the Snort-users mailing list