projects / psad.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 38f010e) | patch
move icmp validation code out of Snort rules comparision
authorMichael Rash <mbr@cipherdyne.org>
Fri, 23 Mar 2012 00:27:37 +0000 (20:27 -0400)
committerMichael Rash <mbr@cipherdyne.org>
Fri, 23 Mar 2012 00:27:37 +0000 (20:27 -0400)
commit124800928e77515ad72f498092741ea36925da68
tree36886c181e09d4032ba396301d80bf36c5116681tree | snapshot
parent38f010ecb5f8fe0dbd1e8950d1fe9ca2c29ea6e6commit | diff
move icmp validation code out of Snort rules comparision

For better performance and correctness, moved icmp type/code validation code out
of Snort rule comparision routine.  Added icmp validation output to --Analyze
mode output.  Disabled DNS lookups in -A mode by default, but added --dns-analysis
command line arg to provide an override.
psad diff | blob | history
psad: Intrusion Detection and Log Analysis with iptables