Snort mailing list archives

Re: Detection Plug-Ins


From: Jeff Nathan <jeff () snort org>
Date: Thu, 16 Dec 2004 01:25:04 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Dec 15, 2004, at 3:36 PM, Matt Kettler wrote:

At 02:48 PM 12/15/2004, Jeff Nathan wrote:
sp_perl
sp_respond2
sp_react
and soon sp_mac

all Detection plugins. :)

:P~~~~

Ok, I'll revise my quote... "I don't know anybody besides the snort team members that write their own detection plugins, except spade"....

        http://www.snort.org/team.html

and sp_react falls in the "bundled with snort itself" category :)


That said, I'd love to work on snort plugins... but that's going to involve free time which I lack.

respond2 (flexresp2) is in CVS HEAD. <-- shameless plug.

Please use flexresp2 instead of flexresp people

Help me TEST (and TEST and TEST...) this code, snortees.

- -Jeff

- --
The original EZ-bake packet oven.
http://nemesis.sourceforge.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFBwSpGEqr8+Gkj0/0RAhqrAJ4oWlwtGPKZjvDFXBow5IJdivgtGgCfUIpC
Z6IvjOGjTta92BxuQo8jzcc=
=8eYw
-----END PGP SIGNATURE-----



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: