[Snort-users] Tagged Packet in the new snort?
yasayag at ...11827...
Thu Mar 7 03:20:03 EST 2013
I'd like to know how the new version from snort 2.9.x handles with the
situation when the payload is too big and the actually trigger for the
alerting is somewhere deep in the payload.
In the older version I found the solution in the so-called "tag: Tagged
Packet", but now I can find neither the signature "Tagged Packet" nor
the trigger for gettingthe alert (and I searched for it very intensively)
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users