[Snort-users] snort 2.9.x.x software flow chart

Joel Esler jesler at ...1935...
Thu Apr 4 15:44:27 EDT 2013

On Apr 4, 2013, at 2:06 PM, waldo kitty <wkitty42 at ...14940...> wrote:

> figure 6 in the below old (2004) pdf concerning snort 2.4 might help... not sure 
> how far off the mark it may be with today's 2.9 version of snort...
> http://www.princeton.edu/~soumyas/papers/bell_labs_report_snort.pdf

That, is still largely accurate from an extremely high level.  Of course there are a ton of things missing in there (like the IP reputation preprocessor)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130404/e49cb9ac/attachment.html>

More information about the Snort-users mailing list