Personally, I would look into processing unified files instead.
However, there is some documentation in the Snort 2.1 book on writing
a simple output plugin.
Cheers,
Justin Heath
On 11/8/06, John Draper <lists@webcrunchers.com> wrote:
> Hi,
>
> I checked all the docs on the snort web site, but didn't see any
> details on how to write a
> snort plugin.
>
> Does anyone on this list know of any sites or documentation showing how
> to write
> a "spo" type module?
>
> I just need an overview and a list of the callbacks or calls or
> whatever.... and to understand
> the concept in general without having to spend days and hours to grope
> through tons of
> source code...
>
> Thanx
> John
>
>
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
|