[Snort-users] how enable icmp snort-2.9.6.1

waldo kitty wkitty42 at ...14940...
Thu Jun 19 15:06:13 EDT 2014


On 6/19/2014 9:20 AM, hernani wrote:
>
> *i dont need something in stream5_global for ip?

yes, you do...

 > preprocessor stream5_global: track_tcp yes, \
 >      track_udp yes, \
 >      track_icmp yes, \
        track_ip yes, \
 >      max_tcp 262144, \

http://manual.snort.org/node73.html

it is recommended that you utilize the above URL pages as completely as you 
can... they contain all the docs for the current snort... node1 is, of course, 
the beginning ;)

-- 
  NOTE: No off-list assistance is given without prior approval.
        Please *keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.




More information about the Snort-users mailing list