Re: Developping Snort Preprocessor

[L0rd Ch0de1m0rt <l0rdch0de1m0rt () gmail com>]

Hello.  There are also video and slides:

https://media.defcon.org/dc-16/video/Defcon16-Ben_Feinstein-Snort_Plug-in.m4v

Thank you.

-L0rd Ch0de1m0rt

On 8/10/10, Marcos Rodriguez <marcos.e.rodriguez () gmail com> wrote:
> On Tue, Aug 10, 2010 at 2:44 PM, L0rd Ch0de1m0rt
> <l0rdch0de1m0rt () gmail com>wrote:
>
> > Ben Fienstein did a DEFCON presentation on creating snort
> > preprocessors/plugins in 2008 I think.  That could be a good starting
> > point, it should be available on the DEFCON site.
> >
> > -L0rd Ch0de1m0rt
> >
> > On 8/10/10, kevin huber <huberkev11 () hotmail com> wrote:
> > > I am new at snort development and am trying to build a custom
> > preprocessor.
> > > Does anyone have the steps/tutorial on how to go about writing a custom
> > > preprocessor?  Particularily for deep packet inspection and
> > > modification.
> > > Thanks.
> > >
> > > Kevin
>
> Good call!  Here's the link for the presentation:
>
> http://www.defcon.org/images/defcon-16/dc16-presentations/dc-16-feinstein.pdf

------------------------------------------------------------------------------
This SF.net email is sponsored by 

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev 
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel