racluster config

[CS Lee]

hi carter,

I have seen this in the racluster.conf example that distributed with the
argus client source, one of the line is this -

filter="tcp or udp"    model="saddr daddr proto dport"  status=120
idle=3600  cont

I know what status and idle are, but what is cont as I don't really see it
explained in racluster.5

Thanks.

-- 
Best Regards,

CS Lee<geek00L[at]gmail.com>

http://geek00l.blogspot.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20080607/01de2271/attachment.html>