[Snort-devel] Which parameters to pass in addPreproc func?

Ed Borgoyn (eborgoyn) eborgoyn at ...3461...
Thu May 19 10:43:10 EDT 2016


Have you tried registering the preproc with PROTO_BIT__ALL instead of just
UDP and/or TCP?


On 5/19/16, 8:11 AM, "Jan Hermes" <jan.hermes at ...3632...> wrote:

>I would like to let my dynamic preprocessor being called on every single
>package that runs through the network. Which parameters do I have to
>pass to the registration function?
>
>I tried a lot of combinations with values from the preprocids.h file.
>
>But the best I could get was the preconfigured situation from the
>example preprocessor, which gets called on every package with tcp or udp.
>
>But it is missing all those packages with an unknown ethertype.
>--------------------------------------------------------------------------
>----
>Mobile security can be enabling, not merely restricting. Employees who
>bring their own devices (BYOD) to work are irked by the imposition of MDM
>restrictions. Mobile Device Manager Plus allows you to control only the
>apps on BYO-devices by containerizing them, leaving personal data
>untouched!
>https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
>_______________________________________________
>Snort-devel mailing list
>Snort-devel at lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/snort-devel
>Archive:
>http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
>
>Please visit http://blog.snort.org for the latest news about Snort!





More information about the Snort-devel mailing list