Developing new IPS action plugin

[Özkan KIRIK via Snort-devel <snort-devel () lists snort org>]

Hello,

I'm trying to develop a simple ips_action plugin. I need to use arguments
per rule for action.

newaction tcp any any -> any any ( msg: "new action test", newvar: "abc";
sid: 123 )

Is it possible to access newvar variable within void
NewAction::exec(Packet* p) function?
Or do you suggest another way to pass per rule arguments to action?

Thanks,
Ozkan

_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!