Re: How to debug SNORT source code?

["Al Lewis \(allewi\) via Snort-devel" <snort-devel () lists snort org>]

You can use GDB directly. Compile with “–enable-gdb –enable-debug –enable-debug-msgs”.


Break at main .. then off you go..

Albert Lewis
ENGINEER.SOFTWARE ENGINEERING
Cisco Systems Inc.
Email: allewi () cisco com<mailto:allewi () cisco com>



From: Snort-devel <snort-devel-bounces () lists snort org> on behalf of Awais Ali via Snort-devel <snort-devel () lists 
snort org>
Reply-To: Awais Ali <awaisali901 () gmail com>
Date: Friday, April 3, 2020 at 12:33 PM
To: "snort-devel () lists snort org" <snort-devel () lists snort org>
Subject: [Snort-devel] How to debug SNORT source code?

Hello all,
I want to debug SNORT source code. For example,  i want to see how SNORT source code works when packet comes, passes 
through decoder, preprocessors and detection engine.
Actually i am writing my own preprocessor where i will have to modify decode.c and other files but i am getting errors 
in different source files so i want to debug SNORT source code. Is there any environment or IDE doing this?
I tried with Eclipse but i am unable to debug SNORT inside eclipse.  Looking for help please.

Thanks,
Awais Ali

_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!