snort decision making development

--===============6693847811201231894==
Content-Type: multipart/alternative; boundary="000000000000664b28058fc4e0c3"

--000000000000664b28058fc4e0c3
Content-Type: text/plain; charset="UTF-8"

 Dear snort developers team,


I want to change decision making of snort IPS to my developed algorithm for
my research.
my algorithm gets the alerts from snort detection and based on training
phased that done before, take decision on how to prevent the detected
attack.
how implement this? change which file or section of snort?
would you please help me?


With The Best Regards

--000000000000664b28058fc4e0c3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">
Dear snort developers team,<br><br><br><div>I want to change decision makin=
g of snort IPS to my developed algorithm for my research.</div><div>my algo=
rithm gets the alerts from snort detection and based on training phased tha=
t done before, take decision on how to prevent the detected attack.</div><d=
iv>how implement this? change which file or section of snort?<br></div>woul=
d you please help me?<br><br><br>With The Best Regards

</div>

--000000000000664b28058fc4e0c3--

--===============6693847811201231894==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

--===============6693847811201231894==--