[Snort-devel] Interface plugin
larsjaso at ...282...
Fri Feb 16 19:26:55 EST 2001
I just finished up a plugin so that you can activate a rule just on a single
interface (or !interface if you want). For Example:
alert tcp any 80 <> any any (interface: eth0; msg "Test Plugin")
Is anyone else intereste?. I'll run it for a while to make sure it's
plugin requires modifying 3 lines in snort.c snort.h, but the changes are
larsjaso at ...283...
More information about the Snort-devel