[Snort-devel] Looking for collaboration

Russ rucombs at ...3461...
Thu Jul 2 08:27:52 EDT 2015


If you are doing this as a PoC, have you considered working with 
Snort++?  One of the fundamental goals is to make it easier to this type 
of thing.

On 7/2/15 8:01 AM, Big Whale wrote:
> Hello all,
>
> I am building a Snort preprocessor, designed to parse ModSecurity CRS 
> and with inline enabled, the packet can be dropped without even 
> reaching to the 7th layer. However, i am facing some difficulties in 
> porting the ModSecurity engine into my preprocessor and some bug in my 
> parser. So if any of you guys is interested, you can contribute to 
> this github repository: d0lph1n98/Snort-ModSec-CRS-Parser 
> <https://github.com/d0lph1n98/Snort-ModSec-CRS-Parser>.
> 	
> image <https://github.com/d0lph1n98/Snort-ModSec-CRS-Parser>
> 	
> 	
> 	
> 	
> 	
> d0lph1n98/Snort-ModSec-CRS-Parser 
> <https://github.com/d0lph1n98/Snort-ModSec-CRS-Parser>
> Snort-ModSec-CRS-Parser - Snort Dynamic Preprocessor to parse 
> ModSecurity CRS
>
> View on github.com <https://github.com/d0lph1n98/Snort-ModSec-CRS-Parser>
> 	
> Preview by Yahoo
>
>
>
>
> ------------------------------------------------------------------------------
> Don't Limit Your Business. Reach for the Cloud.
> GigeNET's Cloud Solutions provide you with the tools and support that
> you need to offload your IT needs and focus on growing your business.
> Configured For All Businesses. Start Your Cloud Today.
> https://www.gigenetcloud.com/
>
>
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20150702/33c9b9bd/attachment.html>


More information about the Snort-devel mailing list