[Snort-devel] another spo question
Joseph Nicholas Yarbrough
nyarbrough at ...118...
Tue Dec 19 03:59:43 EST 2000
Thanks for the responce.
However I don't see any documentation for output plugins in README.PLUGINS.
Any further advise on writing spo's?
On Monday 18 December 2000 13:03, Joe McAlerney wrote:
> Joseph Nicholas Yarbrough wrote:
> > To use a custom output plugin I:
> > *) write the spo files
> > *) Then add the spo file to the list of files linked into snort in the
> > Makefile.
> You also need to add an #include "<plugin_name.h>" to plugbase.h, and
> call your setup function from the relevant Init function in plugbase.c.
> The Init function will either be InitPlugIns(), InitPreprocessors(), or
> InitOutputPlugins(), depending on what type it is.
> > *) Then compile.
> > Now I (hopefully) have a snort linked with my output plugin.
> > How do I tell snort to use my output plugin?
> > Do I use the "-A" option?
> You don't need to.
> Take a look at the README.PLUGINS file in case you haven't already.
> There's good stuff in there for users and developers.
> -Joe M.
More information about the Snort-devel