Snort mailing list archives
Re: Hard choice: Preprocessor or Tagging
From: Michael Boman <michael.boman () securecirt com>
Date: Tue, 3 Sep 2002 05:02:58 +0800
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Monday 02 September 2002 23:56, you wrote:
[ please obey Reply-to: ]
Sorry, my reflex is to press 'Reply All'.
I've hacked the sourcecode of spo_database.c so it ignores the BFP part. It's an easy hack but if anyone wants a diff file please let me know. DSMake it a option in the output line and I'll include it.
Ok. Here is a diff against SNORT_1_8 CVS. I called the option 'ignore_bpf' and it's a boolean. I updated README.database documentation to reflect the change as well. The code seems to work nicely but as usual it's provided AS-IS/It-works-for-me and if it breaks you get to keep both pices. And any spelling errors is just your imagination, they don't really exist bla bla bla (I am bored, doesn't it show?) ;) #include <std/disclaimer.h> Best regards Michael Boman - -- Michael Boman Security Architect, SecureCiRT (A SBU of Z-Vance Pte Ltd) http://www.securecirt.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE9c9IGds5fQJiraJwRAkrWAJ9TDlUuTyxboEuxjvVNPsbX1Rh8pACbBR7u Rlrb97AXTrXrFw4yvzmLemo= =Zt5w -----END PGP SIGNATURE-----
Attachment:
ignore_bpf.patch
Description:
Current thread:
- Hard choice: Preprocessor or Tagging Michael Boman (Aug 31)
- Re: Hard choice: Preprocessor or Tagging Chris Green (Sep 02)
- Re: Hard choice: Preprocessor or Tagging Michael Boman (Sep 02)
- Re: Hard choice: Preprocessor or Tagging Chris Green (Sep 02)
- Re: Hard choice: Preprocessor or Tagging Michael Boman (Sep 02)
- Re: Hard choice: Preprocessor or Tagging Chris Green (Sep 03)
- Re: Hard choice: Preprocessor or Tagging Michael Boman (Sep 02)
- Re: Hard choice: Preprocessor or Tagging Chris Green (Sep 02)