Re: [Snort-users] Is there any documentation showing how to write a snort plugin?

["Richard Bejtlich" <taosecurity@gmail.com>]

Jason Brvenik wrote:

> You should be able to use ipfw and divert sockets

> Google "openBSD ipfw divert socket" for some links to getting it
> running. Once you have ipfw with divert sockets enabled grab snort from
> snort.org and build using --enable-ipfw

Hi Jason,

Those search results won't help, unfortunately.  A check of OpenBSD's
man pages shows OpenBSD doesn't support divert(4) or IPFW(8). [0]
FreeBSD does. [1]

Sincerely,

Richard

[0] http://www.openbsd.org/cgi-bin/man.cgi
[1] http://www.freebsd.org/cgi/man.cgi

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users