Snort mailing list archives
Reputation Preprocessor
From: Shlomi Musseri <musseri10 () gmail com>
Date: Mon, 5 Dec 2011 16:55:41 +0200
Hi Guys, We work with snort in port mirroring mode. We have a lot of packet drop because we using a lot of IP blacklist rules. In the new version of snort 2.9.2.1 we try to use the Reputation Preprocessor that will help us to runs IP Reputation before other preprocessors. The preprocessor doesn't write any logs. Why we don't see any output from the Reputation Preprocessor?? Can it run port mirroring mode ?? Thanks, Shlomi
------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-novd2d
_______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Reputation Preprocessor Shlomi Musseri (Dec 05)
- Reputation Preprocessor Shlomi Musseri (Dec 07)
- Re: Reputation Preprocessor Joel Esler (Dec 07)
- Re: Reputation Preprocessor Hui Cao (Dec 12)
- Re: Reputation Preprocessor Joel Esler (Dec 07)
- Reputation Preprocessor Shlomi Musseri (Dec 07)