Snort mailing list archives

Re: Backporting some packages from 2.8.4.1 to 2.8.5


From: Ryan Jordan <ryan.jordan () sourcefire com>
Date: Wed, 23 Sep 2009 14:24:54 -0400

In 2.8.5, we replaced the PV struct so that we could do configuration
reloading.

In snort.h, we have the following definiton:
extern SnortConfig *snort_conf; (Note that this is a pointer now.)

SnortConfig has most of the stuff that PV did, but it appears that
"log_plugin_active" and "alert_plugin_active" were removed. SnortMain() no
longer checks for them.

Having looked at a couple of the other output plugins (spo_unified2.c,
spo_database.c), it looks like it's safe to just remove the lines
referencing those two variables.

In general, if you see an old reference to "pv.something", you should
replace it with "snort_conf->something". Just check the SnortConfig
definition in snort.h to make sure the name didn't change.

On Wed, Sep 23, 2009 at 1:47 PM, Luis Daniel Lucio Quiroz <
luis.daniel.lucio () gmail com> wrote:

Le mercredi 23 septembre 2009 12:42:22, vous avez écrit :
Values for the "type" argument should be OUTPUT_TYPE__ALERT or
OUTPUT_TYPE__LOG. These are defined in src/spo_plugbase.h.

On Wed, Sep 23, 2009 at 12:40 PM, Luis Daniel Lucio Quiroz <

luis.daniel.lucio () gmail com> wrote:
again me,

I had this function, how ever NT_OUTPUT_ALERT is not found anymore

does it name has change?

AddFuncToOutputList(AlertFWsam, NT_OUTPUT_ALERT, fwsamlist);



-------------------------------------------------------------------------
----- Come build with us! The BlackBerry&reg; Developer Conference in
SF,
CA is the only developer event you need to attend this year. Jumpstart
your developing skills, take BlackBerry mobile applications to market
and
stay ahead of the curve. Join us from November 9&#45;12, 2009. Register
now&#33; http://p.sf.net/sfu/devconf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users<
https://lists.sourceforge.net/lists/listinfo/snort-users%0ASn
ort-users>list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

thanx

Another one:

I cant realize this:
extern PV pv;

PV declaration used to be in snort.h file. but now it is gone.

 I cand find where is the new PV declaration,    or we should save old
 declaration from old snort.h?

The fact is that I have these lines:
+extern PV pv;
+    pv.alert_plugin_active = 1;
+       {       strncpy(buf,pv.config_dir,sizeof(buf)-1);
+               {       strncpy(buf,pv.config_dir,sizeof(buf)-1);


Or how should I change to let 2.8.5 compillation

------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: