[Oisf-users] Preprocessor configuration

Ashwin Paranjpe ashwin1985 at gmail.com
Tue Aug 10 21:26:02 UTC 2010


Just curious. I've been using snort for a while and wanted to try Suricata.
wanted to know if there's a way to selectively enable/disable preprocessors
(just like commenting the line "preprocessor dcerpc" in snort.conf would do
the trick).
Thanks for the prompt response.


On Tue, Aug 10, 2010 at 5:17 PM, Will Metcalf <william.metcalf at gmail.com>wrote:

> Currently there is no way to do this without hacking at the code.
> Just curious, any reason why you want to do this?
>
> Regards,
>
> Will
>
> On Tue, Aug 10, 2010 at 4:10 PM, Ashwin Paranjpe <ashwin1985 at gmail.com>
> wrote:
> > Is there a way to enable/disable preprocessors like dcerpc? suricata.yaml
> > does not seem to have any config option for dcerpc.
> > Thanks in advance.
> >
> > _______________________________________________
> > Oisf-users mailing list
> > Oisf-users at openinfosecfoundation.org
> > http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> >
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20100810/91578711/attachment-0002.html>


More information about the Oisf-users mailing list