[Snort-devel] alert_odd_protocols support in 2.1?

Bradberry, John BradberryJ at ...2109...
Thu Jan 22 07:03:01 EST 2004


Hello:

I'm testing snort 2.1 using 2.1.1-RC1 (Build 15), and cannot find a
method to duplicate the alert_odd_protocols function provided by the
legacy 2.0x Conversation pre-processor.

The ability for snort to detect unusual IP protocols is a useful
function that I hope will continue to be supported.

Recommendations or a reference to documentation will be appreciated.

Best regards.

John Bradberry
The Greentree Group




More information about the Snort-devel mailing list