Snort mailing list archives

RE: Snort IPv6


From: "Chas Tomlin" <cet () ecs soton ac uk>
Date: Thu, 2 Feb 2006 15:44:29 -0000

We've been running IPv6 snort for a while modified by Ken Renard.

Chas


-----Original Message-----
From: snort-users-admin () lists sourceforge net [mailto:snort-users-
admin () lists sourceforge net] On Behalf Of Eric Hines
Sent: 02 February 2006 14:57
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort IPv6

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Community:

Recently, OMB (Office of Management and Budget) issued a mandate that
all federal agencies be IPv6 compliant by 2008. This sparks the
question
of federal and military organizations who will be going through an
IPv6
roll-out as to when Snort will have support for IPv6 addressing.

I understand that previous attempts were made to make modifications to
the Snort core for support of IPv6 but were abandoned and whether or
not
they are still being worked on is in question.

My understanding is that support of IPv6 will require a rewrite of
some,
if not all, of Snort's Preprocessors and IPv6 support furthermore, can
not be done simply with the use of a Preprocessor, rather
modifications
to the Snort core itself.

Does anyone have any insight in to these efforts or can anyone answer
intelligently to this issue. Does anyone know of a project currently
being developed or worked on that is working towards this effort?



Best Regards,

Eric Hines, GCIA, CISSP
CEO, President
Applied Watch Technologies, LLC


- ---------------------------------------------

Eric Hines, GCIA, CISSP
CEO, President
Applied Watch Technologies, LLC
1095 Pingree Road
Suite 213
Crystal Lake, IL 60014
Toll Free: (877) 262-7593 ext:327
Direct: (847) 854-2725 ext:327
Fax: (847) 854-5106
Web: http://www.appliedwatch.com
Email: eric.hines () appliedwatch com

- --------------------------------------------

"Enterprise Open Source Snort Management"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFD4h27bOqF2QHgUK0RAr0uAJ0QU5JgA/lGsjqAuxn39CjhzDcOCACg11Rf
78Flj534c780OyDtVbNHK/4=
=CZg6
-----END PGP SIGNATURE-----


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log
files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD
SPLUNK!

http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: