Re: New to snort

["Nicholas Mavis (nmavis)" <nmavis () cisco com>]

James,

The only documentation of Snort code would be the comments within the code. Unless Joel has something to contribute… I 
don’t believe there is anything available.

Nick

From: James Lay <jlay () slave-tothe-box net<mailto:jlay () slave-tothe-box net>>
Date: Thursday, April 10, 2014 at 8:26 AM
To: Pothineni sai bhushan <psaibhushan () gmail com<mailto:psaibhushan () gmail com>>
Cc: Snort <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>>
Subject: Re: [Snort-users] New to snort

On Thu, 2014-04-10 at 17:42 +0530, Pothineni sai bhushan wrote:
Thank you. I wanted the documentation to know the roles of each files in processing a packet. Is there any other manual 
or site where that info is available.




On Thu, Apr 10, 2014 at 4:51 PM, James Lay <jlay () slave-tothe-box net<mailto:jlay () slave-tothe-box net>> wrote:
On Thu, 2014-04-10 at 15:28 +0530, Pothineni sai bhushan wrote:
Hi,

  I am new to snort. Is there any documentation for snort source code?I would like to know where the snort actually 
sends calls to drop packets and how snort interacts with drivers.

 Do DAQs act as abstract layer between network interface and snort?




I'm sure the source code itself is documented.  I believe DAQ is the abstraction layer...it used to be libpcap.

James



I'm certain one of the snort developers would have this info...gents?

James

------------------------------------------------------------------------------
Put Bad Developers to Shame
Dominate Development with Jenkins Continuous Integration
Continuously Automate Build, Test & Deployment 
Start a new project now. Try Jenkins in the cloud.
http://p.sf.net/sfu/13600_Cloudbees

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!