[Snort-devel] Snort 2.0rc2 patch to fix the Unix socket problem

Nick Zitzmann dreamless at ...1522...
Tue Apr 1 13:09:01 EST 2003


As of Snort 2.0rc2 today, Snort still expects its Unix sockets to 
appear in /dev when the Unix socket plugin is used, which is still not 
allowed on most Unix systems.

Here are patches that fix the problem by looking for the socket outside 
of /dev. The patches also move the Alertpkt data structure into the .h 
file, which makes it easier to write programs that use the plugin. I 
just tested them and they compile cleanly into version 2.0rc2.

Nick Zitzmann
AIM/iChat: dragonsdontsleep
Check out my software page: http://dreamless.home.attbi.com/

"Building the future and keeping the past alive are one and the same 
thing." - Metal Gear Solid 2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: unixsock_c20_patch
Type: application/octet-stream
Size: 1553 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20030401/23ff5030/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: unixsock_h20_patch
Type: application/octet-stream
Size: 1101 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20030401/23ff5030/attachment-0001.obj>


More information about the Snort-devel mailing list