[Snort-users] Hard choice: Preprocessor or Tagging

Michael Boman michael.boman at ...4162...
Mon Sep 2 14:09:34 EDT 2002

Hash: SHA1

On Monday 02 September 2002 23:56, you wrote:
> [ please obey Reply-to: ]

Sorry, my reflex is to press 'Reply All'.

> >  I've hacked the sourcecode of spo_database.c so it ignores the BFP part.
> > It's an easy hack but if anyone wants a diff file please let me know. DS
> Make it a option in the output line and I'll include it.

Ok. Here is a diff against SNORT_1_8 CVS. I called the option 'ignore_bpf' and 
it's a boolean. I updated README.database documentation to reflect the change 
as well.

The code seems to work nicely but as usual it's provided AS-IS/It-works-for-me 
and if it breaks you get to keep both pices. And any spelling errors is just 
your imagination, they don't really exist bla bla bla (I am bored, doesn't it 
show?) ;)

#include <std/disclaimer.h>

Best regards
 Michael Boman

- -- 
Michael Boman
Security Architect, SecureCiRT (A SBU of Z-Vance Pte Ltd)
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: ignore_bpf.patch
Type: text/x-diff
Size: 7618 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020902/79c1a953/attachment.patch>

More information about the Snort-users mailing list