Re: Stream preprocessor 3WHS port suppression

[Andrea Venturoli <ml () netfence it>]

On 07/07/16 13:27, Andrea Venturoli wrote:

> > I don't think there's an option to ignore the ports as well.
>
> Is there a reason behind that?
> I mean, would it be sensible to support filtering by port or would that
> be illogical for whatever reason I'm not aware of?

Since I got no answer, I guess there is no reason *not* to have this 
option; so I patched the source code and I think it's working.

In case someone is interested or cares to double-check, the diffs can be 
downloaded from
http://netfence.it/download/snort_3whs_ignore_port_patch.tbz

  bye
        av.

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports.http://sdm.link/zohodev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!