[Snort-users] how enable icmp snort-

waldo kitty wkitty42 at ...14940...
Thu Jun 19 15:06:13 EDT 2014

On 6/19/2014 9:20 AM, hernani wrote:
> *i dont need something in stream5_global for ip?

yes, you do...

 > preprocessor stream5_global: track_tcp yes, \
 >      track_udp yes, \
 >      track_icmp yes, \
        track_ip yes, \
 >      max_tcp 262144, \


it is recommended that you utilize the above URL pages as completely as you 
can... they contain all the docs for the current snort... node1 is, of course, 
the beginning ;)

  NOTE: No off-list assistance is given without prior approval.
        Please *keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.

More information about the Snort-users mailing list