[Snort-users] Order of preprocessing...

Ashley Thomas athomas at ...5484...
Mon Jun 3 16:46:02 EDT 2002


Hi,

If we have all the following preprocessors turned on, the order in which
packet will pass through them would be

--->frag2--->stream4+--->http decode--->
      |             |
      |             +--->telnet decode-->
      |             |
      |             +--->rpc decode--->
      |
      +-------------------------------> icmp / udp packets


This order is important. right ? correct me if i am wrong..

thanks a lot
ashley

------------------------------------------------------------------------
What I do today is important because I am paying a day of my life for it. 
------------------------------------------------------------------------




More information about the Snort-users mailing list