[Snort-users] Tagged Packet in the new snort?

Yossi yasayag at ...11827...
Thu Mar 7 03:20:03 EST 2013

Hi guys,

I'd like to know how the new version from snort 2.9.x handles with the 
situation when the payload is too big and the actually trigger for the 
alerting is somewhere deep in the payload.

In the older version I found the solution in the so-called "tag: Tagged 
Packet", but now I can find neither the signature "Tagged Packet" nor 
the trigger for gettingthe alert (and I searched for it very intensively)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130307/ca9c667d/attachment.html>

More information about the Snort-users mailing list