Montimage / mmt-probe

A high-performance network monitoring tool
https://montimage.com
Apache License 2.0
6 stars 4 forks source link

Different outputs between probe and Security #7

Closed Frankccv closed 1 year ago

Frankccv commented 1 year ago

When I try to execute Probe setting ignore-remain-flow = false in the default configuration file I don't get any alert, while executing mmt_sec_standalone with the same pcap I get 19 alerts. The problem persists even on online monitoring on interface lo.

Frankccv commented 1 year ago

Need to compile with the command "make SECURITY_MODULE compile "