Snort mailing list archives
Re: Backporting some packages from 2.8.4.1 to 2.8.5
From: Ryan Jordan <ryan.jordan () sourcefire com>
Date: Wed, 23 Sep 2009 14:24:54 -0400
In 2.8.5, we replaced the PV struct so that we could do configuration reloading. In snort.h, we have the following definiton: extern SnortConfig *snort_conf; (Note that this is a pointer now.) SnortConfig has most of the stuff that PV did, but it appears that "log_plugin_active" and "alert_plugin_active" were removed. SnortMain() no longer checks for them. Having looked at a couple of the other output plugins (spo_unified2.c, spo_database.c), it looks like it's safe to just remove the lines referencing those two variables. In general, if you see an old reference to "pv.something", you should replace it with "snort_conf->something". Just check the SnortConfig definition in snort.h to make sure the name didn't change. On Wed, Sep 23, 2009 at 1:47 PM, Luis Daniel Lucio Quiroz < luis.daniel.lucio () gmail com> wrote:
Le mercredi 23 septembre 2009 12:42:22, vous avez écrit :Values for the "type" argument should be OUTPUT_TYPE__ALERT or OUTPUT_TYPE__LOG. These are defined in src/spo_plugbase.h. On Wed, Sep 23, 2009 at 12:40 PM, Luis Daniel Lucio Quiroz < luis.daniel.lucio () gmail com> wrote:again me, I had this function, how ever NT_OUTPUT_ALERT is not found anymore does it name has change? AddFuncToOutputList(AlertFWsam, NT_OUTPUT_ALERT, fwsamlist);------------------------------------------------------------------------------ Come build with us! The BlackBerry® Developer Conference inSF,CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to marketandstay ahead of the curve. Join us from November 9-12, 2009. Register now! http://p.sf.net/sfu/devconf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users%0ASnort-users>list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-usersthanx Another one: I cant realize this: extern PV pv; PV declaration used to be in snort.h file. but now it is gone. I cand find where is the new PV declaration, or we should save old declaration from old snort.h? The fact is that I have these lines: +extern PV pv; + pv.alert_plugin_active = 1; + { strncpy(buf,pv.config_dir,sizeof(buf)-1); + { strncpy(buf,pv.config_dir,sizeof(buf)-1); Or how should I change to let 2.8.5 compillation
------------------------------------------------------------------------------ Come build with us! The BlackBerry® Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9-12, 2009. Register now! http://p.sf.net/sfu/devconf
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Backporting some packages from 2.8.4.1 to 2.8.5 Luis Daniel Lucio Quiroz (Sep 23)
- Re: Backporting some packages from 2.8.4.1 to 2.8.5 Ryan Jordan (Sep 23)
- Re: Backporting some packages from 2.8.4.1 to 2.8.5 Luis Daniel Lucio Quiroz (Sep 23)
- Re: Backporting some packages from 2.8.4.1 to 2.8.5 Ryan Jordan (Sep 23)
- Re: Backporting some packages from 2.8.4.1 to 2.8.5 Luis Daniel Lucio Quiroz (Sep 23)
- Re: Backporting some packages from 2.8.4.1 to 2.8.5 Ryan Jordan (Sep 23)
