Snort mailing list archives
Announcing sp_perl
From: Jeff Nathan <jeff () snort org>
Date: Sat, 10 May 2003 03:48:47 -0700
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 As described in our CanSecWest/core03 presentation, Advanced IDS, Brian Caswell and I are proud to present a new detection plugin for Snort: sp_perl. This detection plugin offers users full regular expression matching within a Snort rule as well as runtime execution of perl code. The patch is available here: http://www.snort.org/dl/contrib/patches/snort-perl/snort_perl.diff.gz and here: http://cerberus.sourcefire.com/~jeff/presentations/cansecwest-2003/snort_pe rl.diff.gz A README related to this patch and the PowerPoint slides used in the presentation are available here: http://cerberus.sourcefire.com/~jeff/presentations/cansecwest-2003/READ_ME_ FIRST.txt http://cerberus.sourcefire.com/~jeff/presentations/cansecwest-2003/caswell- nathan.ppt Enjoy, Brian and Jeff P.S. Jed Haile rules. - -- http://cerberus.sourcefire.com/~jeff (pgp key available) "Great spirits have always encountered violent opposition from mediocre minds." - - Albert Einstein -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (OpenBSD) iD8DBQE+vNkXEqr8+Gkj0/0RAvNNAJ9hSWmStD5PgvyL8zz2M0w3CR+grgCgiY5v VZTv1yuYLynWA/HG81faod0= =g1CC -----END PGP SIGNATURE----- ------------------------------------------------------- Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara The only event dedicated to issues related to Linux enterprise solutions www.enterpriselinuxforum.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Announcing sp_perl Jeff Nathan (May 10)
- Re: [Snort-sigs] Announcing sp_perl Chris Green (May 12)
- RE-Announcing sp_perl Brian (May 13)