Snort
[Top] [All Lists]

Re: [Snort-users] [RGSPAM] Re: Is there any documentation showing how to

To: John Draper <lists@webcrunchers.com>
Subject: Re: [Snort-users] [RGSPAM] Re: Is there any documentation showing how to write a snort plugin?
From: Martin Roesch <roesch@sourcefire.com>
Date: Sat, 2 Dec 2006 19:46:33 -0500
Cc: Snort Users <snort-users@lists.sourceforge.net>
Delivered-to: sp-com-lists@consult.net
Delivered-to: snort-list@securepoint.com
In-reply-to: <45720DC3.4020209@webcrunchers.com>
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=snort-users>
List-help: <mailto:snort-users-request@lists.sourceforge.net?subject=help>
List-id: "Snort users talk about... Snort!" <snort-users.lists.sourceforge.net>
List-post: <mailto:snort-users@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=unsubscribe>
References: <4552843B.2030508@webcrunchers.com> <2E3F4343-40FD-4468-B9CB-FDCA68E1C7CD@sourcefire.com> <455E20CF.1010801@webcrunchers.com> <C9CA3795-3B6E-40E3-8BD7-19F86015EE07@sourcefire.com> <45720DC3.4020209@webcrunchers.com>
Sender: snort-users-bounces@lists.sourceforge.net
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Check in the templates directory, it's right off the root directory  
in the tarball.


On Dec 2, 2006, at 6:35 PM, John Draper wrote:

> Martin Roesch wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>>
>> On Nov 17, 2006, at 3:51 PM, John Draper wrote:
>>
>>> Is there any effort to write up a bonehead document with   
>>> suggestions and
>>> approaches on how to sucessfully
>>> write and test such a plugin?
>>
>>
>> No, I've never done anything in that area.  I always figured that  
>> if  you had the C chops to write a plugin then the  
>> "docs" (comments) in  the template files would be enough.
>
> And where might I find these template files?  Perhaps my answer  
> lies in these files.
>
> John
>

- --
Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616
Sourcefire - Security for the Real World - http://www.sourcefire.com
Snort: Open Source IDP - http://www.snort.org




-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFFch5qqj0FAQQ3KOARAocyAJ0WomiuInXCbRg088z97ScZt/a99gCfdXAN
0CGJRWLwBKITC7DG1JpNV+0=
=Nccz
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

<Prev in Thread] Current Thread [Next in Thread>