Snort mailing list archives
Re: snort -protocol support
From: Matt Kettler <mkettler () evi-inc com>
Date: Tue, 08 Feb 2005 11:29:19 -0500
At 06:28 AM 2/8/2005, s a wrote:
I like to know whether it is possible to configure snort for WAP support like Wireless Session Protocol(WSP), Wireless Transaction Protocol(WTP)...If so needed some suggestions in this regard.The above is required as my intention is to test the WSP packet that i capture lively with the "WAP Forum" standards at the bit level.
Reposting the same question without changing it isn't going to get you an answer.
Since I know nothing about WSP, WAP, or WTP, it would be impossible for me to answer your questions. Judging from the silence, nobody else here knows enough about them either.
In general, snort looks at things at the IP layer and up. If it's an IP packet, snort can be configured to detect it. Since snort has no built-in preprocessors fro WAP, WSP or WTP, you'll probably need to write some fancy PCRE statements to parse them.
------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort -protocol support s a (Feb 08)
- Re: snort -protocol support Matt Kettler (Feb 08)