[Snort-devel] [Snort++] Trying to integrate a custom Inspector

Ronin CS ronincs17 at ...2499...
Mon May 1 17:14:56 EDT 2017


Hello guys,

I'm trying to learn more about Snort++ and Inspectors as I develop my own
module to test on it, but I'm having a lot of issues while building the
extras again.

So far, I've created a super simple Inspector, that all it does is print
basic packet information everytime it goes through the "eval" method.

I'm taking the "DPX Inspector" as a basis for my Inspector, so I've created
a new folder inside /extra/inspectors, let's say, "test", and inside of it
I have the Inspector itself "test.cc" and two other files copied from "dpx"
directory, "CMakeLists.txt" and "Makefile.am".

I've modified these last two files to match my new Inspector. Same for the
files at /extra/inspectors.

But when I try to build it using "make", I receive:

make[4]: Leaving directory '/home/ronin/snort_src/snort3-
master/extra/src/inspectors/dpx'
make[3]: Leaving directory '/home/ronin/snort_src/snort3-
master/extra/src/inspectors/dpx'
Making install in test
make[3]: Entering directory '/home/ronin/snort_src/snort3-
master/extra/src/inspectors/test'
make[3]: *** No rule to make target 'install'.  Stop.
make[3]: Leaving directory '/home/ronin/snort_src/snort3-
master/extra/src/inspectors/test'
Makefile:369: recipe for target 'install-recursive' failed
make[2]: *** [install-recursive] Error 1
make[2]: Leaving directory '/home/ronin/snort_src/snort3-
master/extra/src/inspectors'
Makefile:373: recipe for target 'install-recursive' failed
make[1]: *** [install-recursive] Error 1
make[1]: Leaving directory '/home/ronin/snort_src/snort3-master/extra/src'
Makefile:407: recipe for target 'install-recursive' failed
make: *** [install-recursive] Error 1

To be honest, I don't know the correct way to do it (integrate a new
Inspector). I've searched for references but I couldn't find anything.

Ronin.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20170501/fcdb9a1b/attachment.html>


More information about the Snort-devel mailing list