[Snort-devel] [snort-devel] Chainning pre-processors
emiliano.fausto at ...2499...
Wed Dec 4 12:52:48 EST 2013
I'm creating a new preprocessor which needs to have the whole content in a
packet which was fragmented.
So I thought of using the frag3 preprocessor to re-assembly the packets,
and then, when this reassembly is done, sent it to my own preprocessor.
Do you know if this is possible? May I have the output of frag3 being the
input of my own preprocessor?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-devel