[Snort-devel] Dropping packets in a plugin...

Peter Silberman peterjsilberman at ...398...
Wed Sep 24 07:41:25 EDT 2003


Calling DisableDetect() will prevent the OS and snort
from seeing the packet?

--- Chris Green <cmg at ...402...> wrote:
> Peter Silberman <peterjsilberman at ...398...> writes:
> 
> > This might be a simple question. However I m still
> > somewhat clueless as to how to do this. If I write
> a
> > preprocessor plugin. Is there away to drop the
> packets
> > so that the engine/Operating system never sees
> them?
> > Any example code or example plugins already out
> there
> 
> 
> Call DisableDetect() from your preprocessor on the
> packet.
> -- 
> Chris Green <cmg at ...402...>
> You now have 14 minutes to reach minimum safe
> distance.
> 
> 
>
-------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
>
https://lists.sourceforge.net/lists/listinfo/snort-devel


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com




More information about the Snort-devel mailing list