[Snort-devel] Multi-Packet detection code

tlewis at ...255... tlewis at ...255...
Fri Aug 17 17:36:25 EDT 2001


On 17 Aug 2001, anonpoet wrote:

> Well, I just started testing an engine that will detect packets across
> multiple packets.  I'm going to stick it in the next version of Hogwash.
> I was wondering if anyone here was interested.

It definitely sounds like an improvement over what snort does presently,
but I wonder why you would make it part of Hogwash?  Aren't there other
parts of snort than pattern-matching that could benefit from such
data continuity?

--
Todd Lewis
tlewis at ...255...





More information about the Snort-devel mailing list