Re: few brief w32 questions ...

[Jeff Nathan <jeff () snort org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



- --On Wednesday, June 25, 2003 8:16 -0700 Jon Baer <security () jonbaer net> 
wrote:

> ok after reading the book here are a few questions i still have:
>
> 1. arp preprocessor, not available on w32 yet?

It is available on Windows.  I verified this just one moment ago.

[...]

> 3. with resp keyword is there anyway to inject a custom packet (either win
> or *nix)?

Right now? No.  In the future?  Perhaps.  Making the packets is easy, 
sending them unfortunately blocks the rest of the system.  Coming up with a 
way to express how a packet should be built within the snort rules language 
isn't something I'm ready to dive into.

> thanks.
>
> - jon
>
> pgp key: http://www.jonbaer.net/jonbaer.asc
> fingerprint: F438 A47E C45E 8B27 F68C 1F9B 41DB DB8B 9A0C AF47

You're welcome.

- -Jeff

- --
http://cerberus.sourcefire.com/~jeff       (gpg key available)
Great spirits have always encountered violent opposition from mediocre
minds.
- - Albert Einstein
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (Darwin)

iD8DBQE++5HUEqr8+Gkj0/0RAhlZAJ41YoAcMaIseA7fCzNnJcmnw6+GSACdHBFW
KDbxJk/81xRdStknLamq6ds=
=WiS6
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users