support for OLSR protocol in Snort

[Vic O <bugtrack2 () gmail com>]

Hello all, I'm planning to develop a signature-based IDS for OLSR using
Snort as my detection engine. For a very
brief background, OLSR is a wireless ad-hoc routing protocol that is derived
from OSPF. For now, am keeping it simple,
so I do not plan to have router communication during the detection process.
My question is this: how should I approach this?
That is, should I simply make it a snort plugin (OLSR messages are sent
to/from port 698 using UDP), or should I attempt
to directly add OLSR functionality, treating it like protocols like
TCP/ICMP? Any suggestions?

Regards,

Vic

------------------------------------------------------------------------------
BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA
The must-attend event for mobile developers. Connect with experts. 
Get tools for creating Super Apps. See the latest technologies.
Sessions, hands-on labs, demos & much more. Register early & save!
http://p.sf.net/sfu/rim-blackberry-1

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel