[Snort-sigs] Packet Decoder
skaf at ...2517...
Fri May 28 00:58:04 EDT 2004
I saw that in Snort the preprocessors and the detection engine are
plug-ins, so you can modify and add new functionality.
Is it possible to feed the system with another packet decoder than snort
? if I have my own sensor that takes packets and send them to snort
(preprocessor and then the detection engine) but in a different way than
the libpcap (tagged with a QoS for example) , is that possible ?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-sigs