Re: Snort Dynamic Preprocessor

[Russ Combs <rcombs () sourcefire com>]

On Mon, Apr 22, 2013 at 3:59 AM, Prathibha P G <prathibhapg () gmail com>wrote:

> Hi all,
>    can any body tel me what is the use of a dyanamic snort preprocessor
> kit. and how to work with it?????
>
> Dynamic preprocessors are like "plugins" for Snort that do additional
analysis of packets and sessions after decoding and before detection.  If
by "kit" you mean the "starter kit" on www.snort.org, that is a source
tarball example that will facilitate writing your own preprocessor.  The
README therein has the details you need to get going.


> ------------------------------------------------------------------------------
> Precog is a next-generation analytics platform capable of advanced
> analytics on semi-structured data. The platform includes APIs for building
> apps and a phenomenal toolset for data science. Developers can use
> our toolset for easy data analysis & visualization. Get a free account!
> http://www2.precog.com/precogplatform/slashdotnewsletter
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!