Re: Interfacing Snort with other apps

[Russ <rucombs () cisco com>]

Snort provides the ability to create a dynamic preprocessor which is a 
plugin that does whatever you want it to do.  Have a look at the 
subdirectories in src/dynamic-preprocessors/ to see how that is done.  
There used to be a dynamic preprocessor "starter kit" but I don't see it 
on snort.org/downloads/.

Snort++ provides support for several types of plugins that are simpler 
to write because, for example, you don't have to worry about reloads.  
Look in extra/ for examples.

Have fun.

Russ


On 5/12/16 1:25 AM, Akhil Koul wrote:
> Hello
>
> Does Snort provide a C/C++ API to interface with other applications, 
> for instance Web Application Firewalls(Waf). I am working on a project 
> which will interface Snort to work with Modsecurity.
> Any help is appreciated.
>
> Thanks
> Akhil
>
>
> ------------------------------------------------------------------------------
> Mobile security can be enabling, not merely restricting. Employees who
> bring their own devices (BYOD) to work are irked by the imposition of MDM
> restrictions. Mobile Device Manager Plus allows you to control only the
> apps on BYO-devices by containerizing them, leaving personal data untouched!
> https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!