[Snort-devel] Interface plugin

default larsjaso at ...282...
Fri Feb 16 19:26:55 EST 2001


I just finished up a plugin so that you can activate a rule just on a single
interface (or !interface if you want).  For Example:

alert tcp any 80 <> any any (interface: eth0; msg "Test Plugin")

Is anyone else intereste?.  I'll run it for a while to make sure it's
stable.  The
plugin requires modifying 3 lines in snort.c snort.h, but the changes are
minor.

Jason Larsen
larsjaso at ...283...





More information about the Snort-devel mailing list