[Snort-sigs] i've recieved your help

Moyer, Shawn SMoyer at ...758...
Wed Jul 30 19:56:01 EDT 2003


FYI, SpamAssassin did an excellent job of flagging the original post as spam due to the high HTML content. ;)


--shawn

> -----Original Message-----
> From: Matt Kettler [mailto:mkettler at ...189...]
> Sent: Wednesday, July 30, 2003 12:38 PM
> To: qkhou; snort-sigs at lists.sourceforge.net
> Subject: Re: [Snort-sigs] i've recieved your help
> 
> 
> It should be noted that in general posting anything but 
> plain-text to the 
> snort-* groups is frowned upon. Many of the subscribers read 
> these groups 
> in pure-text mode in a unix shell account.
> 
> That said, I'm not sure what you mean by "network processor" 
> here, so I'm 
> drawing a total blank on the details of what you'd like to do.
> 
> In general with some effort you could adapt snort to a lot of 
> things.. I 
> don't see an technical reasons why you couldn't adapt snort 
> to gather input 
> from something other than pcap. It might be a fair amount of 
> work to do it, 
> but I'd expect that most of the code was just dealing with 
> data packets and 
> wouldn't really know exactly where they came from.
> 
> You might also want to read the license that's included with 
> snort if you 
> are planning on making a modified version.
> 
> 
> 
> At 06:07 PM 7/30/2003 +0800, qkhou wrote:
> >hi,all
> >     i'll extraordinarily appreciate you  for all your 
> help.Especially 
> > Matt Ketter & jeremica.
> >     it's a pity that there are little relative books on 
> sale,i can not 
> > make it more clear.
> >     And
> >     i wanna know whether snort can be reworked into a new form the 
> > capture process is implemented via the network processor, then the 
> > analysis process by snort.
> >
> >
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email sponsored by: Free pre-built ASP.NET sites including
> Data Reports, E-commerce, Portals, and Forums are available now.
> Download today and enter to win an XBOX or Visual Studio .NET.
> http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet
_072303_01/01
_______________________________________________
Snort-sigs mailing list
Snort-sigs at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs




More information about the Snort-sigs mailing list