Hello, Ryu developer
I saw that ryu published a project that integrates the snort for IDS on mailing
list
<http://sourceforge.net/p/ryu/mailman/ryu-devel/thread/[email protected]/>,
but it's not maintain for a long time.
The old source code still used gevent library. I switched the module that
support eventlet library now and add an application named
`simple_switch_snort.py` this application not only forwarding packets like
L2 switch but also mirroring incoming packets to Snort.
I forked the osrg/ryu project to https://github.com/John-Lin/ryu
You can see the snort module code over here.
+ ryu/lib/snortlib.py
+ ryu/lib/alert.py
+ ryu/app/simple_switch_snort.py
And the doc here
+ ryu/doc/source/snort_integrate.rst
I also tested in my test environment with Centec v350 OFswitch. It's work!
Che-Wei Lin, John Lin
Institute of Communication Engineering,
National Tsing Hua University
[image: 林哲緯 on about.me]
E-mail: [email protected]
Blog: blog.linton.tw
Mobile: +886-952-301-269
------------------------------------------------------------------------------
Slashdot TV.
Video for Nerds. Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
Ryu-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ryu-devel
