RE: Preprocessor options documentation

["Schmehl, Paul L" <pauls () utdallas edu>]

Thanks, Eric.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/



-----Original Message-----
From: Erek Adams [mailto:erek () snort org] 
Sent: Friday, February 28, 2003 7:26 PM
To: Schmehl, Paul L
Cc: Snort Users List
Subject: Re: [Snort-users] Preprocessor options documentation


On Fri, 28 Feb 2003, Paul Schmehl wrote:

> Is there documentation anywhere for the preprocessors?  I'm looking 
> specifically for information regarding the portscan2 preprocessor.  
> I'm wondering if there is an option similar to the ignorehosts option 
> of portscan?

Not really.

Check <snort_dir>/src/preprocessors/*portscan2.* for the best sort of
info.

And yes, there is a portscan2-ignorehosts: directive.  :)

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users