[Snort-devel] Dropping packets in a plugin...

Chris Green cmg at ...402...
Wed Sep 24 06:21:15 EDT 2003

Peter Silberman <peterjsilberman at ...398...> writes:

> This might be a simple question. However I m still
> somewhat clueless as to how to do this. If I write a
> preprocessor plugin. Is there away to drop the packets
> so that the engine/Operating system never sees them?
> Any example code or example plugins already out there

Call DisableDetect() from your preprocessor on the packet.
Chris Green <cmg at ...402...>
You now have 14 minutes to reach minimum safe distance.

More information about the Snort-devel mailing list