Re: snort 2.9.x.x software flow chart

[Joel Esler <jesler () sourcefire com>]

On Apr 4, 2013, at 2:06 PM, waldo kitty <wkitty42 () windstream net> wrote:

> figure 6 in the below old (2004) pdf concerning snort 2.4 might help... not sure 
> how far off the mark it may be with today's 2.9 version of snort...
>
> http://www.princeton.edu/~soumyas/papers/bell_labs_report_snort.pdf

That, is still largely accurate from an extremely high level.  Of course there are a ton of things missing in there 
(like the IP reputation preprocessor)


------------------------------------------------------------------------------
Minimize network downtime and maximize team effectiveness.
Reduce network management and security costs.Learn how to hire 
the most talented Cisco Certified professionals. Visit the 
Employer Resources Portal
http://www.cisco.com/web/learning/employer_resources/index.html

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!