[Snort-openappid] DetectorValidator not called on SSH

Peter Hansen pch66 at ...89...
Mon Jun 8 13:27:01 EDT 2015


Hello,

I am attempting to log IP addresses and ports for connections on an app by
app basis, and I am having some trouble doing this using the
DetectorValidator. I note that the documentation does not call the function
for HTTP, SSL, and SIP connections, but as far as I can tell it is also not
being called for SSH connections. Does anyone have guidance on this?

Thank you,
Peter Hansen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-openappid/attachments/20150608/68ad3db1/attachment.html>


More information about the Snort-openappid mailing list