[Snort-users] OpenAppID

Al Lewis (allewi) allewi at ...589...
Wed Mar 25 21:24:46 EDT 2015

They should be here https://snort.org/downloads under the openAppID section.

Open Detector Package (ODP)
ODP is a package that contains Cisco provided LUA detectors and some application
meta data. Specifically, it contains the following artifacts:
a. Application detectors in Lua language.

b. Port detectors, which are port only application detectors, in  meta-data in YAML format.

c. appMapping.data file containing application metadata. This file should not
   be modified.  The first column contains application identifier and last column
   contains application name.  Other columns contain internal information.

d. Lua library files DetectorCommon.lua, flowTrackerModule.lua and

Albert Lewis
QA Software Engineer
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi at ...589...

From: Michael Brown [mailto:mike.a.brown09 at ...11827...]
Sent: Wednesday, March 25, 2015 9:00 PM
To: snort user list
Subject: [Snort-users] OpenAppID

Where can I download the detectors for OpenAppID? I am using this tutorial and it says about the detectors. http://blog.snort.org/2014/03/openappid-install-video.html. I can not find them.
Thank you,

Michael A. Brown
mike.a.brown09 at ...11827...<mailto:mike.a.brown09 at ...11827...>
M.S. Forensic Studies: Computer Forensics
B.S. Information Technology: Network Specialist
"The only thing necessary for the triumph of evil is for good men to do nothing" -Edmund Burke

Confidentiality Note: This electronic message is solely for the intended recipient, and may not be viewed by any other person. Access by anyone else is unauthorized and may be unlawful, except with the express consent of either the sender or the intended recipient. If you are not the intended recipient, you are hereby notified that you may not read this E-Mail or any attachment, and any disclosure, copying distributing, using, printing or taking any action in reliance on the contents of this E-Mail is strictly prohibited. The contents of this E-Mail and/or its attachments may be legally confidential and/or privileged; no unintended disclosure is intended to waive any right of privilege or confidentiality, all of which rights are reserved to the fullest extent possible.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150326/c69a40e2/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 332 bytes
Desc: image001.jpg
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20150326/c69a40e2/attachment.jpg>

More information about the Snort-users mailing list