[Snort-devel] snort preprocessor

Sumit Siddharth sumit.siddharth at ...2499...
Fri Nov 11 01:41:00 EST 2005


Hi,
I would like to know if there is a need to have a preprocessor for tools
like nikto etc, just as there is one for nmap .As soon as nikto attack is
launched the snort gives an extensive number of alarms and similar is the
case for some other popular pen-testing tools.
Can a preprocessor serve as a solution of replacing all such alerts with
just one "Nikto"alert.How feasible is it to have preprocessors for all such
popular tools.
Thanks
Sumit
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20051111/659f2d3e/attachment.html>


More information about the Snort-devel mailing list