Sensor

[Pavel Alexandrov <root4root () gmail com>]

Hi all!

Is it way to capture certain packets with snort? Some kind of "iptables
ULOG" or "pcap rule"?
My goal - reduce CPU utilization. Lets say I drop all packets on firewall,
but port 80. And I don't want to snort process packets which will be droped
on firewall anyway.

Thanks for advice

Paul.

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!