[Snort-devel] Dropping packets in a plugin...

Chris Green cmg at ...402...
Wed Sep 24 06:21:15 EDT 2003


Peter Silberman <peterjsilberman at ...398...> writes:

> This might be a simple question. However I m still
> somewhat clueless as to how to do this. If I write a
> preprocessor plugin. Is there away to drop the packets
> so that the engine/Operating system never sees them?
> Any example code or example plugins already out there


Call DisableDetect() from your preprocessor on the packet.
-- 
Chris Green <cmg at ...402...>
You now have 14 minutes to reach minimum safe distance.




More information about the Snort-devel mailing list