[Snort-openappid] OpenAppID rules
Carlos Rodriguez Hernandez
crodriguezh.ext at ...109...
Wed Nov 4 13:13:32 EST 2015
thanks Costas and Mike for your response.
Is it possible to know if in the future there will be rules to act?
So I understand that the purpose of OpenAppID is to detect applications on
the traffic or block traffic based on applications.
But that does not improve performance, I was thinking that if Snort
filtered by applications before going through the detection engine, this
would improve performance by reducing the number of rules to analyze.
Thanks for help,
Carlos Rodríguez Hernández
redborder.net | +34 609477932
This email, including attachments, is intended exclusively for its
addressee. It contains information that is CONFIDENTIAL whose disclosure is
prohibited by law and may be covered by legal privilege. If you have
received this email in error, please notify the sender and delete it from
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-openappid