[Snort-devel] Packet traversal in 1.9

Rob McMillen rvmcmil at ...1029...
Mon Jan 13 19:23:03 EST 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Could someone tell me if packet traversal has changed from 1.8 to 1.9?  If 
I remember correctly it went something like this:

Network--> Packet Decoder
                 |            |
                 V            |
            Preprocessor      |
             (Plug-ins)       | Data Flow
                 |            |
                 V            |
           Detection Engine   |
             (Plug-ins)       |
                 |            |
                 V            |
            Output Stage      V
             (Plug-ins)
                 | 
                 -----------------> Alerts/Logs      

Trying to make sure I have this right.

Anyone know how it will differ in 2.0?

Thanks in advance,

Rob

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.76

iQA/AwUBPiOACPnAyY+9KLjdEQKKowCgrALC8Uec/5BULjWjUfKSsGM4BaAAnjBX
0sql/MLcoCZlPWYPkqDqbxBM
=lxYM
-----END PGP SIGNATURE-----






More information about the Snort-devel mailing list