Reputation Preprocessor

[Shlomi Musseri <musseri10 () gmail com>]

Hi Guys,

We work with snort in port mirroring mode. We have a lot of packet drop
because we using  a lot of IP blacklist rules.
In the new version of snort 2.9.2.1 we try to use the Reputation
Preprocessor that will help us to runs IP  Reputation before other
preprocessors.
The preprocessor doesn't write any logs.
Why we don't see any output from the Reputation Preprocessor?? Can it run
port mirroring mode ??

Thanks,

Shlomi

------------------------------------------------------------------------------
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a reference, checklist and point of 
discussion for anyone considering optimizing the pricing and packaging model 
of a cloud services business. Read Now!
http://www.accelacomm.com/jaw/sfnl/114/51491232/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!