[Snort-devel] Stream 4

From: <dpritsos(at)xtremesports.gr>
Date: Thu Jul 03 2003 - 04:53:28 EDT

For a while I am Trying to create my own preprocessor. For this reason I need to know how can I get the output of stream4. as I read into the 6 chapter of snort2 book the is a packet called uber that I should get. I read the code of stream4 and I sow that stream4 sends a stream_pkt to all preprocessors but I'm not sure tha this packs contain tha stream data that I need. Some test I did sow me that all packets of a stream contain the byte_sent value corectly as the packs added into the stream but the data and dsize all thouse of the original packet and not form stream_packt. How do i get the steam data of the stream via a packet (which pack) or via ubi_tree (and how)

thnks for your help whoever u are.

Keep coding,
dprtsos

---

This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Thu Jul 3 09:35:33 2003