[Snort-sigs] i've recieved your help
SMoyer at ...758...
Wed Jul 30 19:56:01 EDT 2003
FYI, SpamAssassin did an excellent job of flagging the original post as spam due to the high HTML content. ;)
> -----Original Message-----
> From: Matt Kettler [mailto:mkettler at ...189...]
> Sent: Wednesday, July 30, 2003 12:38 PM
> To: qkhou; snort-sigs at lists.sourceforge.net
> Subject: Re: [Snort-sigs] i've recieved your help
> It should be noted that in general posting anything but
> plain-text to the
> snort-* groups is frowned upon. Many of the subscribers read
> these groups
> in pure-text mode in a unix shell account.
> That said, I'm not sure what you mean by "network processor"
> here, so I'm
> drawing a total blank on the details of what you'd like to do.
> In general with some effort you could adapt snort to a lot of
> things.. I
> don't see an technical reasons why you couldn't adapt snort
> to gather input
> from something other than pcap. It might be a fair amount of
> work to do it,
> but I'd expect that most of the code was just dealing with
> data packets and
> wouldn't really know exactly where they came from.
> You might also want to read the license that's included with
> snort if you
> are planning on making a modified version.
> At 06:07 PM 7/30/2003 +0800, qkhou wrote:
> > i'll extraordinarily appreciate you for all your
> > Matt Ketter & jeremica.
> > it's a pity that there are little relative books on
> sale,i can not
> > make it more clear.
> > And
> > i wanna know whether snort can be reworked into a new form the
> > capture process is implemented via the network processor, then the
> > analysis process by snort.
> This SF.Net email sponsored by: Free pre-built ASP.NET sites including
> Data Reports, E-commerce, Portals, and Forums are available now.
> Download today and enter to win an XBOX or Visual Studio .NET.
Snort-sigs mailing list
Snort-sigs at lists.sourceforge.net
More information about the Snort-sigs