Reputation Preprocessor

[Shlomi Musseri <musseri10 () gmail com>]

Hi Guys,

We work with snort in port mirroring mode. We have a lot of packet drop
because we using  a lot of IP blacklist rules.
In the new version of snort 2.9.2.1 we try to use the Reputation
Preprocessor that will help us to runs IP  Reputation before other
preprocessors.
The preprocessor doesn't write any logs.
Why we don't see any output from the Reputation Preprocessor?? Can it run
port mirroring mode ??

Thanks,

Shlomi

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!