concepts.txt (snort3-3.1.29.0) | : | concepts.txt (snort3-3.1.30.0) | ||
---|---|---|---|---|
skipping to change at line 15 | skipping to change at line 15 | |||
=== Modules | === Modules | |||
Modules are the building blocks of Snort. They encapsulate the types of | Modules are the building blocks of Snort. They encapsulate the types of | |||
data that many components need including parameters, peg counts, profiling, | data that many components need including parameters, peg counts, profiling, | |||
builtin rules, and commands. This allows Snort to handle them generically | builtin rules, and commands. This allows Snort to handle them generically | |||
and consistently. You can learn quite a lot about any given module from | and consistently. You can learn quite a lot about any given module from | |||
the command line. For example, to see what stream_tcp is all about, do | the command line. For example, to see what stream_tcp is all about, do | |||
this: | this: | |||
$ snort --help-config stream_tcp | $ snort --help-module stream_tcp | |||
Modules are configured using Lua tables with the same name. So the | Modules are configured using Lua tables with the same name. So the | |||
stream_tcp module is configured with defaults like this: | stream_tcp module is configured with defaults like this: | |||
stream_tcp = { } | stream_tcp = { } | |||
The earlier help output showed that the default session tracking timeout is | The earlier help output showed that the default session tracking timeout is | |||
30 seconds. To change that to 60 seconds, you can configure it this way: | 30 seconds. To change that to 60 seconds, you can configure it this way: | |||
stream_tcp = { session_timeout = 60 } | stream_tcp = { session_timeout = 60 } | |||
End of changes. 1 change blocks. | ||||
1 lines changed or deleted | 1 lines changed or added |