Snort mailing list archives
Order of preprocessing...
From: "Ashley Thomas" <athomas () cc gatech edu>
Date: Mon, 3 Jun 2002 19:44:54 -0400
Hi,
If we have all the following preprocessors turned on, the order in which
packet will pass through them would be
--->frag2--->stream4+--->http decode--->
| |
| +--->telnet decode-->
| |
| +--->rpc decode--->
|
+-------------------------------> icmp / udp packets
This order is important. right ? correct me if i am wrong..
thanks a lot
ashley
------------------------------------------------------------------------
What I do today is important because I am paying a day of my life for it.
------------------------------------------------------------------------
_______________________________________________________________
Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Order of preprocessing... Ashley Thomas (Jun 03)
- Re: [Snort-devel] Order of preprocessing... Chris Green (Jun 03)
