Snort mailing list archives

Re: Hard choice: Preprocessor or Tagging


From: Michael Boman <michael.boman () securecirt com>
Date: Tue, 3 Sep 2002 05:02:58 +0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday 02 September 2002 23:56, you wrote:
[ please obey Reply-to: ]

Sorry, my reflex is to press 'Reply All'.

 I've hacked the sourcecode of spo_database.c so it ignores the BFP part.
It's an easy hack but if anyone wants a diff file please let me know. DS

Make it a option in the output line and I'll include it.

Ok. Here is a diff against SNORT_1_8 CVS. I called the option 'ignore_bpf' and 
it's a boolean. I updated README.database documentation to reflect the change 
as well.

The code seems to work nicely but as usual it's provided AS-IS/It-works-for-me 
and if it breaks you get to keep both pices. And any spelling errors is just 
your imagination, they don't really exist bla bla bla (I am bored, doesn't it 
show?) ;)

#include <std/disclaimer.h>

Best regards
 Michael Boman

- -- 
Michael Boman
Security Architect, SecureCiRT (A SBU of Z-Vance Pte Ltd)
http://www.securecirt.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9c9IGds5fQJiraJwRAkrWAJ9TDlUuTyxboEuxjvVNPsbX1Rh8pACbBR7u
Rlrb97AXTrXrFw4yvzmLemo=
=Zt5w
-----END PGP SIGNATURE-----

Attachment: ignore_bpf.patch
Description:


Current thread: