Posted my patches to the Firestorm NIDS (http://people.ecsc.co.uk/~gianni/firestorm) which add IPX protocol decoding. I also threw in an example SAP child decoder, but it is far from complete. I’ll polish off the SAP code and add IPX matching over the next few weeks. I think I may look at Netbios decoding and matching support. I’m very interested in instant messaging decoding (for big brother stylee logging) but I’ll have to see what direction Gianni wants to go in.
Leave a Reply