All of lore.kernel.org
 help / color / mirror / Atom feed
From: Pablo Neira Ayuso <pablo@eurodev.net>
To: amir73il@gmail.com
Cc: Netfilter Development Mailinglist <netfilter-devel@lists.netfilter.org>
Subject: Re: ongoing textsearch/string match - 3 patches
Date: Thu, 26 Jan 2006 14:35:16 +0100	[thread overview]
Message-ID: <43D8D014.8030108@eurodev.net> (raw)
In-Reply-To: <18730dc50601260351s7dab9451x420f3eb88bc90162@mail.gmail.com>

Hi Amir,

amir73il@gmail.com wrote:
>>Could you comment any realistic scenario?
>>
> the usefulness of matching a pattern between packets is for network virus scan.
> it took me some time to finalize my kclamav module, but here it is:
> http://sourceforge.net/projects/kclamav/
> 
> I patched the string match netfilter because it was the closest filter
> to what I needed, but as I said, there is still work to be done to
> make this a useful virus scan filter.
> perhaps a more generic "content filter" is more appropriate here.
> 
> I hope you will find this contribution useful and help me get my
> patches into the kernel.

Sorry for not replying. I haven't forgotten this. I think I can improve
that patch. I'll give it a spin this weekend and I'll get back to you.

-- 
Pablo

      reply	other threads:[~2006-01-26 13:35 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <18730dc50512220611nfea98e2l88da4f25c97f341d@mail.gmail.com>
2005-12-22 22:22 ` ongoing textsearch/string match - 3 patches Pablo Neira Ayuso
     [not found]   ` <18730dc50512250828i2f214c8di49c348f03c84593f@mail.gmail.com>
2005-12-26  3:50     ` Pablo Neira Ayuso
2006-01-26 11:51       ` amir73il
2006-01-26 13:35         ` Pablo Neira Ayuso [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=43D8D014.8030108@eurodev.net \
    --to=pablo@eurodev.net \
    --cc=amir73il@gmail.com \
    --cc=netfilter-devel@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.