[Snort-devel] External DAQ Modules

Michael Altizer maltizer at ...402...
Sat Jan 15 02:36:20 EST 2011


Have you ever wanted to maintain your own DAQ module outside of the 
official LibDAQ distribution?  Concerned about the official release 
cycle in relation to your own development?  Tired of keeping a source 
patch for the official distribution up-to-date?
Well, today is your lucky day!

I've attached two tarballs to this e-mail to demonstrate the suggested 
process for externalizing the DAQ module build process.  
Example-daq-module-0.1.tar.gz is a bare bones example DAQ module and the 
autotools to support it, while pfring-daq-module-0.1.tar.gz is a port of 
Luca Deri's PF_RING DAQ module to this standalone framework.

The basic steps involved in taking example-daq-module and making it your 
own are:
1. Unpack example-daq-module-0.1.tar.gz
2. Rename daq_example.c to daq_<your module name>.c
3. Implement all of the function stubs in the C file
4. Update configure.ac and Makefile.am to reflect your name change 
(%s/example/<your module name>/g)
5. Add any additional autoconf-foo you want to configure.ac (arguments, 
header checks, library checks, etc)
6. Regenerate the autoconf files with 'autoreconf -ivf'
7. Configure, make, and make install!

The only caveat with this process is that you cannot include your DAQ 
module with the static DAQ modules when building externally.  This 
should not be an issue for the majority of users.

-Michael
-------------- next part --------------
A non-text attachment was scrubbed...
Name: example-daq-module-0.1.tar.gz
Type: application/x-gzip
Size: 6046 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20110115/15a4834c/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pfring-daq-module-0.1.tar.gz
Type: application/x-gzip
Size: 9372 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20110115/15a4834c/attachment-0001.bin>


More information about the Snort-devel mailing list