Snort mailing list archives
snort dns preprocessor
From: Scott Campbell <scampbell () iengineer com>
Date: Mon, 14 Jan 2002 18:42:41 -0800
I have put together a basic preprocessor which looks at DNS (UDP port 53) traffic, makes sure that it can be decoded correctly by the native OS routines, and keeps a basic notion of state for the client-server connections. The software has been tested on Sparc Solaris 8, but should play nice on other Unix like systems. Please note that this is not production quality software - I have had it running for the better part of a month with no problems or leaks to speak of, but as always this may not be the case for you. To get the code, install directions and more information about what it does, go to: http://www.geocities.com/axonpotential/snort/index.html scott --- Scott Campbell Senior Unix Systems Engineer iEngineer.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort dns preprocessor Scott Campbell (Jan 14)
