WEBVTT

00:00:01.220 --> 00:00:03.750
[Autogenerated] before we jump into the lab to demonstrate some of the

00:00:03.750 --> 00:00:09.070
plugins let's talk about the Snort Plus Plus or snort three extras package

00:00:09.080 --> 00:00:11.420
that we're going to download install into the system.

00:00:12.160 --> 00:00:15.720
This is a free package that you can install to add additional

00:00:15.720 --> 00:00:18.450
plugins and there's some examples provided.

00:00:19.360 --> 00:00:20.830
We'll see in the coming demos,

00:00:20.830 --> 00:00:23.610
examples of the plug ins that are available and

00:00:23.610 --> 00:00:25.550
we'll be adding onto our own app I.

00:00:25.550 --> 00:00:25.820
D.

00:00:25.820 --> 00:00:28.650
Pre processor installation configuration with one.

00:00:29.450 --> 00:00:33.170
There's a plug in that utilizes this pre processor to collect

00:00:33.170 --> 00:00:35.540
stats on the application activity in the network.

00:00:36.310 --> 00:00:39.090
We'll get that configured and validate that it works.

00:00:39.860 --> 00:00:44.810
I've been discussing lUA and Luigi it a little bit throughout the course and

00:00:44.820 --> 00:00:48.000
the plug in modules is a great place to talk more about it.

00:00:48.740 --> 00:00:52.550
This is a just in time compiler for the lua language,

00:00:52.620 --> 00:00:56.000
which is what you have to know to be able to write a lot of the

00:00:56.000 --> 00:00:58.770
snore extras if you want to learn about it,

00:00:58.900 --> 00:00:59.850
here's the link.

00:01:00.070 --> 00:01:02.830
The reason why I'm sharing this is because there's an example,

00:01:02.830 --> 00:01:07.690
plugin that's provided in the package that's a legit logger to help you out.

00:01:08.350 --> 00:01:11.700
Oh and to be able to write the plugins for things like

00:01:11.700 --> 00:01:13.760
the loggers and the I PS options,

00:01:13.790 --> 00:01:18.050
you'll need to know it or C++ So when it comes to the

00:01:18.050 --> 00:01:20.710
plugins that are available to use right away.

00:01:21.120 --> 00:01:27.490
Here's a sample list as you can see there's a lot of I PS options,

00:01:27.500 --> 00:01:29.370
loggers and research engine.

00:01:29.370 --> 00:01:33.680
plugins This is just a short sample list though,

00:01:33.690 --> 00:01:36.850
there's plenty more when you actually install snore and the

00:01:36.850 --> 00:01:40.400
extras package if you've used it for a while,

00:01:40.900 --> 00:01:42.510
have you used any of these?

00:01:43.150 --> 00:01:46.550
We definitely do using some of the default installation

00:01:46.550 --> 00:01:49.010
and settings at least a little bit.

00:01:49.820 --> 00:01:53.840
If you need to get information on the extras package or download it,

00:01:53.930 --> 00:01:55.080
check out this link.

00:01:55.220 --> 00:01:59.710
It's the GitHub repo for all of it so you can get the info directly from

00:01:59.710 --> 00:02:02.660
the source and pull any updates as they're released.