Home page logo
/

snort logo Snort mailing list archives

Re: Snort Dynamic Preprocessor
From: Russ Combs <rcombs () sourcefire com>
Date: Mon, 22 Apr 2013 08:23:14 -0400

On Mon, Apr 22, 2013 at 3:59 AM, Prathibha P G <prathibhapg () gmail com>wrote:

Hi all,
   can any body tel me what is the use of a dyanamic snort preprocessor
kit. and how to work with it?????

Dynamic preprocessors are like "plugins" for Snort that do additional
analysis of packets and sessions after decoding and before detection.  If
by "kit" you mean the "starter kit" on www.snort.org, that is a source
tarball example that will facilitate writing your own preprocessor.  The
README therein has the details you need to get going.



------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest
Snort news!

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault