Question about http_inspect
Asim Jamshed <[email protected]>
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <CANwh_8aRB6yyb7dqGY1YwbDHxu_wmfMAmz6q0EtM_3KoNdDmFg@mail.gmail.com> |
Hi, I was going through the Snort manual and it says that the http inspect module is stateless (analyzes flows on a per-packet basis). Is that right? I was wondering why it can use stream5 module and perform stateful management like ftp, telnet and smtp protocols? Thanks, --Asim ------------------------------------------------------------------------------ _______________________________________________ Snort-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/snort-devel Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel Please visit http://blog.snort.org for the latest news about Snort!