[Snort-devel] RE: Snort 2.0 HttpFlow configuration (and other syntax)

Andrew R. Baker andrewb at ...835...
Thu Oct 10 14:37:01 EDT 2002


Kreimendahl, Chad J wrote:
> Is the standard for preprocessors going to be to separate the individual
> args (and args values) by commas?  Just curious cause as I was modifying
> the config for our sensors, I noticed that some preprocessors don't use
> commas to separate infomration (HttpFlow, http_decode)... While some do
> (stream4, portscan2).  Was thinking about this from the standpoint of
> making loading of the config from the database an easier task than is
> currently made by different standards for different config and
> preprocessor options.

Each of the preprocessors (and output plugins) can have a unique way of 
specifying arguments.  We are fixing this issue, but it is not ready for 
release yet.

-A






More information about the Snort-devel mailing list