[Snort-devel] Re: Classification (priorities) + bug fix for database plugin

roman at ...49... roman at ...49...
Fri May 11 20:50:29 EDT 2001


Forwarded Message:
> To: roman at ...49...
> From: Jed Pickel <jed at ...7...>
> Subject: Re: Classification (priorities) + bug fix for database plugin
> Date: Fri, 11 May 2001 20:38:04 -0400
> -----
> Looks good.. I'll commit this so we can test the code and meet the
> deadline for a 1.8 release next Tuesday. As we discussed on the phone
> we will have to remove the static inserts for the classification data
> from the create_* files and move that logic to a separate script that
> builds those queries based on the "classification.config" file. This
> way we will not have to change the create_* files every time
> classification.config changes and it will be easier for users to
> assign their own priorities to each class based on their own
> preferences.
> 
> Also note that we need to update create_oracle. 
> 
> Roman, can you do me a favor and forward a copy of this to the list if
> this one does not make it... (sourceforge seems to be dropping any
> email I send them)
> 
> * Jed
> 
> On Fri, May 11, 2001 at 03:00:53PM +0000, roman at ...49... wrote:
> > Enclosed are three patches which add support for classification
> > in the database plug-in.
> > 
> > + Database schema v102
> > + Support for rule classification in the database plug-in
> > + Modified database DDL scripts to support classification 
> > (added table sig_class, modified table signature)
> > + Added indexes in the create_postgresql
> > + Fixed bug and memory leak in Database() for rules which are 
> > IP-only that improperly allocate and corrupt the SQLQuery * 
> > linked list
> > 
> > For those of you concerned.  A partial upgrade from DB schema
> > 100/101=>102 is straightforward.  If desired, a script can
> > be created and posted.
> > 
> > Please test extensively.  This functionality would be nice to sneak
> > into the 1.8 release.
> > 
> > cheers,
> > Roman
> 



---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/






More information about the Snort-devel mailing list