[Snort-devel] Response functions

Jeff Nathan jeff at ...835...
Mon Aug 5 18:15:02 EDT 2002


This is fixed in the HEAD branch and can be found in 1.9beta2.

-Jeff

--On Wednesday, July 31, 2002 17:23:27 +0200 Christopher Kruegel 
<chris at ...1514...> wrote:

> Hello,
>
> I don't quite understand why the list of response functions is associated
> with  a RuleTreeNode and not an OptTreeNode. In my understanding, a
> response should  be bound to only a certain rule.
>
> Looking into rules.c:1212-1225 (snort 1.8.7), we see the following:
>
> /************************************************************************
> ****  *
>  * Function: AddRspFuncToList(int (*func)(), OptTreeNode *)
>  *
>  * Purpose: Adds Response function to OTN
>  *
>  * Arguments: (*func)() => function pointer to the response module
>  *            otn =>  pointer to the current OptTreeNode
>  *
>  * Returns: void function
>  *
>  ************************************************************************
> ***/ void AddRspFuncToList(int (*func) (Packet *, struct _RspFpList *),
> RuleTreeNode * rtn, void *params)
> {
>
> Here, the comment actually expresses what I am thinking (i.e. parameter
> should  be an OptreeNode) while the code does something different
> (RuleTreeNode). Is  this the way it should be?
>
> Thank you,
> christopher
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: Dice - The leading online job board
> for high-tech professionals. Search and apply for tech jobs today!
> http://seeker.dice.com/seeker.epl?rel_code1
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel


--
http://jeff.wwti.com            (pgp key available)
"Great spirits have always encountered violent opposition from mediocre
minds."
- Albert Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20020805/30c70527/attachment.sig>


More information about the Snort-devel mailing list