[Snort-devel] Using example dynamic-rule plug-ins?

Adam Keeton akeeton at ...402...
Thu Oct 11 09:47:07 EDT 2007

Note, you'll need to rerun automake before configure.


Steven Sturges wrote:
> Libtool places the .so into src/dynamic-examples/dynamic-rule/.libs,
> so check in there... You only need to place the .so into the
> snort_dynamicrule directory, not the individual .o & .lo files.
> If the .so file isn't there, try changing the Makefile.am in the
> dynamic-examples/dynamic-rule to use -export-dynamic instead of
> -module, and change noinst_LTLIBRARIES to noinst_lib_LTLIBRARIES.
> Re-run your configure command from the top level directory
> and then rebuild.
> We'll get the Makefile example fixed in CVS.
> Cheers.
> -steve
> c0uchw4rrior wrote:
>> To clarify a bit, what all do I need to link against to generate a shared
>> lib from the dynamic rule .o and/or .lo files I've got? Is there a Makefile
>> target? An example gcc or libtool command-line would be great.
>> Regards,
>> c0uch
>> On 10/10/07, c0uchw4rrior <c0uchw4rrior at ...2499...> wrote:
>>> Hey folks,
>>> I have a some questions about the dynamic-rule stuff under
>>> src/dynamic-examples/dynamic
>>> -rule.  I am working off the recent snort-2.8.0 source tarball.
>>> I've successfully run `./configure --enable-dynamicplugin` from the
>>> snort-2.8.0 directory. I then went into the src/dynamic-examples directory
>>> and ran make. make ran to completion with no errors.
>>> After running make I am left with a number of object files under
>>> src/dynamic-examples/dynamic-rule:
>>> rules.lo  sfsnort_dynamic_detection_lib.lo  sid109.lo  sid637.lo
>>> rules.o   sfsnort_dynamic_detection_lib.o   sid109.o   sid637.o
>>> I've copied all the .o and .lo files to /usr/local/lib/snort_dynamicrule,
>>> but I suspect I need to compile these somehow into shared object .so files
>>> My Snort command-line is `snort -T -c /etc/snort/snort.conf
>>> --dynamic-detection-lib-dir=/usr/local/lib/snort_dynamicrule`
>>> The output shows that the dynamic rules were not found by Snort:
>>> Loading all dynamic detection libs from
>>> /usr/local/lib/snort_dynamicrule...
>>> Warning: No dynamic libraries found in directory
>>> /usr/local/lib/snort_dynamicrule!
>>> The other dynamic components are being found and successfully loaded.
>>> Snort successfully completes its test run and exits.
>>> What am I missing? Do I need to turn the .lo and/or .o files into .so
>>> files? How? Is their a Makefile target for this?
>>> Any help would be greatly appreciated!,
>>> c0uch

More information about the Snort-devel mailing list