Snort mailing list archives
Re: Dynamic Preprocessor example does not make alert why?
From: Yoshimasa Obana <yoshimasa-o () is naist jp>
Date: Wed, 12 Sep 2012 15:48:17 +0900
Thanks for your help. I add config to make snort revert to the old behavior. It works fine now. http://manual.snort.org/node18.html (2012/09/07 22:13), Martin Schütte wrote:
On 06.09.2012 17:41, Yoshimasa Obana wrote:I tested the plugin, but it does not make alert.Did you add the plugin's alerts to etc/preprocessor.rules and etc/gen-msg.map? Alternatively you can add the option "config autogenerate_preprocessor_decoder_rules" to your snort.conf.
-- Yoshimasa Obana e-mail: yoshimasa-o () is naist jp NAIST iplab ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Dynamic Preprocessor example does not make alert why? Yoshimasa Obana (Sep 07)
- Re: Dynamic Preprocessor example does not make alert why? Martin Schütte (Sep 07)
- Re: Dynamic Preprocessor example does not make alert why? Yoshimasa Obana (Sep 11)
- Re: Dynamic Preprocessor example does not make alert why? Joel Esler (Sep 07)
- Re: Dynamic Preprocessor example does not make alert why? Martin Schütte (Sep 07)