[Oisf-users] Preprocessor configuration

Victor Julien victor at inliniac.net
Wed Sep 8 10:30:22 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Ashwin,

I've opened up a feature ticket for this, see
https://redmine.openinfosecfoundation.org/issues/234

Ideas are welcome on how to express this in the configuration language.

Cheers,
Victor

Ashwin Paranjpe wrote:
> Just curious. I've been using snort for a while and wanted to try
> Suricata. wanted to know if there's a way to selectively enable/disable
> preprocessors (just like commenting the line "preprocessor dcerpc" in
> snort.conf would do the trick).  
> Thanks for the prompt response.
> 
> 
> On Tue, Aug 10, 2010 at 5:17 PM, Will Metcalf <william.metcalf at gmail.com
> <mailto:william.metcalf at gmail.com>> wrote:
> 
>     Currently there is no way to do this without hacking at the code.
>     Just curious, any reason why you want to do this?
> 
>     Regards,
> 
>     Will
> 
>     On Tue, Aug 10, 2010 at 4:10 PM, Ashwin Paranjpe
>     <ashwin1985 at gmail.com <mailto:ashwin1985 at gmail.com>> wrote:
>     > Is there a way to enable/disable preprocessors like dcerpc?
>     suricata.yaml
>     > does not seem to have any config option for dcerpc.
>     > Thanks in advance.
>     >
>     > _______________________________________________
>     > Oisf-users mailing list
>     > Oisf-users at openinfosecfoundation.org
>     <mailto:Oisf-users at openinfosecfoundation.org>
>     > http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>     >
>     >
> 
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Oisf-users mailing list
> Oisf-users at openinfosecfoundation.org
> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users


- --
- ---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
- ---------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkyHZb4ACgkQiSMBBAuniMc/2wCfevLUsmfcZBE0UZVhrX9tTz23
NaMAniKvP9llt7KevTbdheJ2RrglWmT0
=0YzO
-----END PGP SIGNATURE-----



More information about the Oisf-users mailing list