<meta http-equiv="content-type" content="text/html; charset=utf-8">Just curious. I've been using snort for a while and wanted to try Suricata. wanted to know if there's a way to selectively enable/disable preprocessors (just like commenting the line "preprocessor dcerpc" in snort.conf would do the trick). <div>
Thanks for the prompt response.</div><div><br></div><br><div class="gmail_quote">On Tue, Aug 10, 2010 at 5:17 PM, Will Metcalf <span dir="ltr"><<a href="mailto:william.metcalf@gmail.com">william.metcalf@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Currently there is no way to do this without hacking at the code.<br>
Just curious, any reason why you want to do this?<br>
<br>
Regards,<br>
<br>
Will<br>
<div><div></div><div class="h5"><br>
On Tue, Aug 10, 2010 at 4:10 PM, Ashwin Paranjpe <<a href="mailto:ashwin1985@gmail.com">ashwin1985@gmail.com</a>> wrote:<br>
> Is there a way to enable/disable preprocessors like dcerpc? suricata.yaml<br>
> does not seem to have any config option for dcerpc.<br>
> Thanks in advance.<br>
><br>
</div></div>> _______________________________________________<br>
> Oisf-users mailing list<br>
> <a href="mailto:Oisf-users@openinfosecfoundation.org">Oisf-users@openinfosecfoundation.org</a><br>
> <a href="http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
><br>
><br>
</blockquote></div><br>