Like Tree4Likes
  • 4 Post By anduril462

Snort ssl preprocessor

This is a discussion on Snort ssl preprocessor within the Tech Board forums, part of the Community Boards category; Here's my issue: I am developing a preprocessor for Snort. I am trying to use the out of the box ...

  1. #1
    Registered User
    Join Date
    Jul 2011
    Location
    Champaign, Illinois, United States
    Posts
    27

    Snort ssl preprocessor

    Here's my issue:
    I am developing a preprocessor for Snort. I am trying to use the out of the box SSL preprocessor as a base line but so far its not making a whole lot of sense. Specifically I want to store the exchange between the server and the client (i.e. the IP addresses, certificates, essentially all the information that is sent before the connection gets encrypted). From what it looks like, looking at the code for the SF_snort_packet, which is the main structure that the rest of the SSL preprocessor uses, there is no way to access all of that information that I want to. Is this true? Is there another way to access the stream directly? Thanks for the input.

  2. #2
    Registered User
    Join Date
    Nov 2010
    Location
    Long Beach, CA
    Posts
    5,488
    I doubt you'll find many snort experts here -- I'm certainly not one. Somebody else may come along later and give you the help you need, but I wouldn't hold your breath. Have you tried asking this on the snort mailing lists (http://www.snort.org/community/groups/)?


    We can definitely help you if you have any specific C questions, but your general "how does snort's dynamic preprocessor work" is not well suited for this forum.

  3. #3
    Registered User
    Join Date
    Jul 2011
    Location
    Champaign, Illinois, United States
    Posts
    27
    No, I haven't tried that yet. I knew there was a lot of members here and thought maybe someone would come along who could help me our. I will go over to the snort group and ask there. Thanks!

Popular pages Recent additions subscribe to a feed

Similar Threads

  1. Preprocessor help
    By royen in forum C++ Programming
    Replies: 3
    Last Post: 05-14-2009, 10:56 AM
  2. preprocessor help
    By brunogon in forum C Programming
    Replies: 13
    Last Post: 06-16-2008, 11:14 AM
  3. preprocessor!!
    By nishu1988 in forum C++ Programming
    Replies: 6
    Last Post: 07-24-2007, 11:31 PM
  4. Preprocessor
    By manutd in forum C++ Programming
    Replies: 5
    Last Post: 11-29-2006, 03:37 PM
  5. C preprocessor
    By Unregisterd in forum C Programming
    Replies: 1
    Last Post: 09-04-2001, 12:17 PM

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21