|
|||||||||||
|
Re: [Snort-users] "Saving State" in Snort (Absent jusqu'au 29/07/2002)
From: Pascal Painparay <pascal.painparay(at)tdf.fr>
Date: Mon Apr 21 2003 - 11:22:01 EDT
Cdt
>>> snort-users 04/21/03 17:04 >>>
"Michael L. Artz" <dragon@october29.net> writes: Nah, I just saw a mailing list reply from Guy Harris over on the tcpdump works mailing list that uses something more akin to (COUNTER=0;
if [ COUNTER -eq 0 ];
gzip -dc $i
COUNTER=1;
else
gzip -dc $i | dd bs=24 count=0 skip=1
fi
done) | snort -r - >
-- Chris GreenReceived on Mon Apr 21 12:00:18 2003 This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 11:51:37 EDT |
||||||||||
|
|||||||||||