[Snort-devel] [PATCH] filter on session age

Stephan Stephan at ...2610...
Tue Jul 25 05:05:29 EDT 2006


Hi Kees

The patch compiles and works (with Snort 2.6.0) after I had applied the following patch (otherwise the struct Session wasn't found):
***********
--- sp_age_check.c.orig 2006-07-25 10:15:33.808324000 +0200
+++ sp_age_check.c      2006-07-25 10:15:50.808329000 +0200
@@ -52,6 +52,9 @@
 #include "plugin_enum.h"
 #include "util.h"
 #include "sp_age_check.h"
+#define _STREAM4_INTERNAL_USAGE_ONLY_
+#include "stream.h"
+#undef _STREAM4_INTERNAL_USAGE_ONLY_


 typedef struct _AgeCheckData
***********

I wrote a detection plugin for measure the entropy of packets.


Best regards,
Stephan Toggweiler





More information about the Snort-devel mailing list