[Snort-devel] another spo question

Joseph Nicholas Yarbrough nyarbrough at ...118...
Tue Dec 19 03:59:43 EST 2000


Thanks for the responce.
However I don't see any documentation for output plugins in README.PLUGINS.
Any further advise on writing spo's?

-Nick

On Monday 18 December 2000 13:03, Joe McAlerney wrote:
> Joseph Nicholas Yarbrough wrote:
> > To use a custom output plugin I:
> > *) write the spo files
> > *) Then add the spo file to the list of files linked into snort in the
> > Makefile.
>
> You also need to add an #include "<plugin_name.h>" to plugbase.h, and
> call your setup function from the relevant Init function in plugbase.c.
> The Init function will either be InitPlugIns(), InitPreprocessors(), or
> InitOutputPlugins(), depending on what type it is.
>
> > *) Then compile.
> >
> > Now I (hopefully) have a snort linked with my output plugin.
> > How do I tell snort to use my output plugin?
> >
> > Do I use the "-A" option?
>
> You don't need to.
>
> Take a look at the README.PLUGINS file in case you haven't already.
> There's good stuff in there for users and developers.
>
> -Joe M.




More information about the Snort-devel mailing list