[Snort-devel] stream4 preprocessor

Andreas Östling andreaso at ...387...
Thu Apr 29 11:59:05 EDT 2004


This wheel has been reinvented so many times already.
Argus is your friend, it does what you want and much more,
http://www.qosient.com/argus/

/Andreas

Glenn MacGregor wrote:
...
> So I thinking about writing a preprocessor (or whatever) to collect all the 
> stats. Basically a copy of the stream4 that accepts all types of traffic and 
> does nothing else but write that file.
> 
> Did I miss something, is there something in snort that will do this for me? If 
> not can anyone suggest a starting point on writing a module 
> (preprocessor/input-plugin/output-plugin, whichever is appropriate) to do this.




More information about the Snort-devel mailing list