[Snort-devel] Testing plugins

tlewis at ...255... tlewis at ...255...
Fri Jan 4 09:23:06 EST 2002


Sigh.  I hope to put an end to these problems today.

--
Todd Lewis
tlewis at ...255...

Q: How many marxists does it take to screw in a lightbulb?
A: None - the bulb contains the seeds of its own revolution. 

On Fri, 4 Jan 2002, Rob McMillen wrote:

> I wrote some code for Snort that allows it to receive packets from iptables,
> and I am trying to test the plugins to ensure the  Snort functionality was
> not lost.  I know the portscan preprosessor and output plugins work because
> I've seen them in action, but is there a good way to tell if the other
> preprosessor plugins are working properly (i.e. frag2, stream2, stream4,
> stream4_reassemble, http_decode, rpc_decode, bo, telnet_decode)?
> 
> I also wrote a function that will set the drop packet flag so any plugin can
> decide if a packet should be dropped.
> 
> Thanks in advance,
> 
> Rob
> 
> 
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> 





More information about the Snort-devel mailing list