[Snort-devel] stream based av and snort/Stream5
lynch.meng at ...2499...
Tue Mar 9 10:22:48 EST 2010
I am working for develop a snort preprosessor to do stream based anti virus.
I need do mime decodeing and decompress, so reassembled packets should come to my preprosessor sequentially.
client side packet have no problem, but i can not get packet with PKT_REBUILT_STREAM flags from server side?
snort version 2.8.x.
preprocessor stream5_global: max_tcp 8192, track_tcp yes, track_udp no
preprocessor stream5_tcp: policy first, ports both 80
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-devel