[Snort-users] Reputation Preprocessor

Shlomi Musseri musseri10 at ...11827...
Wed Dec 7 17:56:26 EST 2011


Hi Guys,

We work with snort in port mirroring mode. We have a lot of packet drop
because we using  a lot of IP blacklist rules.
In the new version of snort 2.9.2.1 we try to use the Reputation
Preprocessor that will help us to runs IP  Reputation before other
preprocessors.
The preprocessor doesn't write any logs.
Why we don't see any output from the Reputation Preprocessor?? Can it run
port mirroring mode ??

Thanks,

Shlomi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20111208/c91d47f4/attachment.html>


More information about the Snort-users mailing list