[Snort-devel] spo_xml patch

Fyodor fygrave at ...1...
Sun Jan 13 05:01:02 EST 2002


On Sat, Jan 12, 2002 at 12:52:13PM -0500, roman at ...49... wrote:
> Enclosed is a patch to the xml output plugin to:
> 
> + properly handle non-IP alerts
> + properly handle IP packets with a proto=ICMP,UDP,TCP
>   but no corresponding p->icmph,udph,tcph
> 
> This addresses bug #491771 (xml equivalent of the
> database bug) and #488742.


comitted. Just noticed spo_xml.c is not in current btw. (only in
SNORT_1_8 release).


-- 
http://www.notlsd.net
PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1




More information about the Snort-devel mailing list