Snort mailing list archives

Re: Snort-devel Digest, Vol 37, Issue 2


From: mohamad ali haghgo via Snort-devel <snort-devel () lists snort org>
Date: Wed, 12 Aug 2020 09:35:25 +0430

On Sun, Jul 26, 2020 at 11:46 AM mohamad ali haghgo <
haghgomohamadali () gmail com> wrote:



On Wed, Jul 22, 2020 at 8:31 PM <snort-devel-request () lists snort org>
wrote:

Send Snort-devel mailing list submissions to
        snort-devel () lists snort org

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.snort.org/mailman/listinfo/snort-devel
or, via email, send a message with subject or body 'help' to
        snort-devel-request () lists snort org

You can reach the person managing the list at
        snort-devel-owner () lists snort org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Snort-devel digest..."


Today's Topics:

   1. Snort 3 per DAQ-instance variables (Y M)


----------------------------------------------------------------------

Message: 1
Date: Wed, 22 Jul 2020 10:48:29 +0000
From: Y M <snort () outlook com>
To: "snort-devel () lists snort org" <snort-devel () lists snort org>
Subject: [Snort-devel] Snort 3 per DAQ-instance variables
Message-ID:
        <
DM5PR17MB19934CE4D59FC87C6308429BA8790 () DM5PR17MB1993 namprd17 prod outlook com


Content-Type: text/plain; charset="iso-8859-1"

It looks like overriding individual DAQ-instance variables was removed as
some point since the 'instances' configuration is no longer available. Does
this mean that there is no need or ability to configure them? Looking at
the current configurable items, variables are only applicable globally.  I
don't have specific use-case, just trying to understand. For example, it
was possible to configure DAQ such as:

daq = {
 module_dirs = {
 '/usr/local/lib/daq'
    },
 module = 'afpacket',
 input_spec = 'ens192',
 variables = {
 'lb_total=2',
 'fanout_type=hash'
    },
 instances = {
        {
             id = 0,
            variables = {
                'lb_id=1'
            }
        },
        {
            id = 1,
            variables = {
                'lb_id=2'
            }
        }
    }
}

Thank you.
YM
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <
https://lists.snort.org/pipermail/snort-devel/attachments/20200722/3334f0de/attachment-0001.htm


------------------------------

Subject: Digest Footer

_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel


------------------------------

End of Snort-devel Digest, Vol 37, Issue 2
******************************************


_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: