Re: Logging a complete TCP Session

[Michael Boman <michael.boman () securecirt com>]

On Sat, Feb 08, 2003 at 09:32:46PM -0800, Mahdi Kefayati wrote:
> In he Name of the Dearest
>
> Hi eerybody
>
> Dose anybody know how I can log a complete TCP Session Using Snort;
> I mean the Session that one or more than one of its packets has generated
> an alert.
>
> Regards
>
> Mahdi Kefayati

Check out the tagging option:
http://www.snort.org/docs/writing_rules/chap2.html#tth_sEc2.3.31

Best regards
 Michael Boman

-- 
Michael Boman
Security Architect, SecureCiRT Pte Ltd
http://www.securecirt.com

Attachment: _bin
Description: