Snort
[Top] [All Lists]

Re: [Snort-users] Is there any documentation showing how to write a snor

To: Martin Roesch <roesch@sourcefire.com>
Subject: Re: [Snort-users] Is there any documentation showing how to write a snort plugin?
From: John Draper <lists@webcrunchers.com>
Date: Sat, 02 Dec 2006 15:35:31 -0800
Cc: Snort Users <snort-users@lists.sourceforge.net>
Delivered-to: sp-com-lists@consult.net
Delivered-to: snort-list@securepoint.com
In-reply-to: <C9CA3795-3B6E-40E3-8BD7-19F86015EE07@sourcefire.com>
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=snort-users>
List-help: <mailto:snort-users-request@lists.sourceforge.net?subject=help>
List-id: "Snort users talk about... Snort!" <snort-users.lists.sourceforge.net>
List-post: <mailto:snort-users@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=unsubscribe>
References: <4552843B.2030508@webcrunchers.com> <2E3F4343-40FD-4468-B9CB-FDCA68E1C7CD@sourcefire.com> <455E20CF.1010801@webcrunchers.com> <C9CA3795-3B6E-40E3-8BD7-19F86015EE07@sourcefire.com>
Sender: snort-users-bounces@lists.sourceforge.net
User-agent: Mozilla Thunderbird 0.7.3 (Macintosh/20040803)
Martin Roesch wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> On Nov 17, 2006, at 3:51 PM, John Draper wrote:
>
>> Is there any effort to write up a bonehead document with  suggestions 
>> and
>> approaches on how to sucessfully
>> write and test such a plugin?
>
>
> No, I've never done anything in that area.  I always figured that if  
> you had the C chops to write a plugin then the "docs" (comments) in  
> the template files would be enough.

And where might I find these template files?  Perhaps my answer lies in 
these files.

John


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

<Prev in Thread] Current Thread [Next in Thread>