[Snort-devel] spp_sicmple

Andreas Östling andreaso at ...387...
Thu Jun 27 00:50:08 EDT 2002


On Thursday 27 June 2002 03.01, Chris Green wrote:

> You can a set of call backs for spp_conversation now (check out the
> psWatch function).  You can delete the conversation at the end of it
> if you see a real "session terminator" and/or add a call back that
> happens on session termination :-)
>
> It's kinda neat code that will hopefully evolve rather quickly.  1.8.7
> is "done".  Its going to be packed up and shipped out the door ASAP. :-)

Sounds cool. I'll try to take a look at it sometime.

/Andreas





More information about the Snort-devel mailing list