Re: [Netadm-devel] Hi~ Netadm members~ .. some project for ips tools

[EP8KHA E. <ep...@ho...>]

Hi,
If anyone wants to take a look at how the snort engine goes about it's 
business in processing packets, without looking at the initializations, you 
can do a search for this function in snort.c:

pcap_loop(pd, pv.pkt_cnt, (pcap_handler) PcapProcessPacket, NULL)

Thereafter, you can follow through the PcapProcessPacket to find out how the 
packets are manipulated. Cheers ^_^

EP8KHA

_________________________________________________________________
Don’t just search. Find. Check out the new MSN Search! 
http://search.msn.click-url.com/go/onm00200636ave/direct/01/