making changes to snort source code

cynthia_thomas · n00b Joined: 29 Nov 2005 Posts: 1

hi,
I am post graduate student in network engineering. I am currently trying to modularise snort for my research project.i don't have any idea about how to do it.If anybody have any idea please help me
thanks and regards
cynthia

Chris W · Posted: Thu Dec 01, 2005 9:08 am Post subject:

I'm not sure what you mean by "modularise Snort".

If you mean "grouping rules", you can add and remove rules at will.

If you are talking about redesigning the Snort IDS matching system itself then you have a programming issue. A Snort development forum or mailing list would be a better place to start.

Lots of stuff here...
http://www.snort.org/
_________________
Cheers,
Chris W
"Common sense: The collection of prejudices acquired by age 18." -- Einstein

allucid · Veteran Joined: 02 Nov 2002 Posts: 1314 Location: atlanta

You also might want to check out bro: http://bro-ids.org/

It seems to be more robust than snort and might be better suited to your project.