[Snort-users] When will be multiple consecutive sessions be captured when tag is being used with sessions?

Russ rucombs at ...589...
Fri Feb 17 08:46:19 EST 2017


Only one tag:session, exclusive at a time.

On 2/17/17 4:52 AM, Maxim wrote:
> Hi all,
> I noticed the following lines in file tag.c of snort 2.9.9.0 source 
> repository,
> // TBD when tags leverage sessions, tag nodes can be freed at end // 
> of session. then we can configure this to allow multiple // 
> (consecutive) sessions to be captured.
> static const unsigned s_max_sessions = 1;
> Does that mean currently snort can handle only 1 session and capture 
> corresponding packets at a time? Many thanks.
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20170217/78985541/attachment.html>


More information about the Snort-users mailing list