Hi Patrick,
I am trying to implement Snort on the IXP1200 Intel
network processor.So basically I will not need the
libpcap to be running since I get the packets off the
wire through the IXP1200.I will be writing code so
that the IXP will classify the packets,and send them
to the StrongArm core.Snort will be running on the
StrongArm core .Now when the packets get to the core,
snort will do the pattern matching and generate alerts
accordingly.
Basically I need to break snort up in two parts.The
version of Snort that I have 2.2.0 has a lot of files
in them with all the preprocessing and all of that
stuff.All that I need is a few files that will help me
implement the actual pattern matching.
Thanks,
Tabrez
--- "Harper, Patrick" <Patrick.Harper@phns.com> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
It might help if you explain what you are wanting to
do with it?
- -----Original Message-----
From: tabrez rajani [mailto:tabrez_rajani@yahoo.com]
Sent: Tuesday, January 25, 2005 3:42 PM
To: snort-devel@lists.sourceforge.net
Cc: snort-users@lists.sourceforge.net
Subject: [Snort-users] Barebones version of Snort
Hello Everybody,
I was wondering if anybody had the bare bones
version
of snort i.e., Snort compressed to about 4-5 files
with just the basic functionality.
I would really appreciate it if somebody could help
me
out with this.
Regards,
Tabrez
__________________________________
Do you Yahoo!?
Yahoo! Mail - Find what you need with new enhanced
search.
http://info.mail.yahoo.com/mail_250
-
-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW --
Interactive
Reporting
Tool for open source databases. Create drag-&-drop
reports. Save time
by over 75%! Publish reports on the web. Export to
DOC, XLS, RTF,
etc.
Download a FREE copy at
http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or
unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1
iQA/AwUBQfemJ5iWafDb7+B/EQJJiQCeMTPlefziUcxP3N3vWwqOnmur05AAoLXT
OMfx30eDoo/drltYfivwpO+n
=/Hov
-----END PGP SIGNATURE-----
Disclaimer:
This electronic message, including any attachments,
is confidential and intended solely for use of the
intended recipient(s). This message may contain
information that is privileged or otherwise
protected from disclosure by applicable law. Any
unauthorized disclosure, dissemination, use or
reproduction is strictly prohibited. If you have
received this message in error, please delete it and
notify the sender immediately.
__________________________________
Do you Yahoo!?
Yahoo! Mail - 250MB free storage. Do more. Manage less.
http://info.mail.yahoo.com/mail_250
-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
