[Snort-users] Packet Drop in Preprocessor

Yoshimasa Obana yoshimasa-o at ...16109...
Wed Feb 20 11:26:21 EST 2013


Hi all,

I'm writing dynamic preprocessor in Snort 2.9.2.

I deleted
#config disable_decode_alerts
and added
config enable_decode_drops
to snort.conf.

I thought Snort drops packet when preprocessors call _dpd.alertAdd.
But Snort does not seem to drop packet.

I would like to know why.

Thanks

-- 
Yoshimasa Obana
e-mail: yoshimasa-o at ...16109...
NAIST iplab




More information about the Snort-users mailing list