Re: Flexresp Support and libnet ver 1.1.0

[Jeff Nathan <jeff () snort org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

AS Chris mentioned, the new Libnet API has yet to be really explored.

The new libnet has it's own notion of memory management, and to remain 
*fast*, or as fast as possible, snort currently manages the memory needed 
to send responses itself (virtually identically to how the old libnet 
versions did it behind the scenes).

The NEW libnet, however, uses several bits of memory to construct a single 
packet which isn't really viable with the existing flexersp model.

- -Jeff

- --On Wednesday, September 18, 2002 09:54:56 -0800 Jim Cliver 
<jim.c () aptalaska net> wrote:

> Hello,
>
> I am trying to configure snort 1.8.7 with --enable-flexresp switch.
> I've compiled successfully the latest version of libnet (1.1.0) of
> 8/5/02 as stated (though not by release) in the INSTALL doc.  According
> to the README doc of libnet 1.1.0 the API has been redesigned, this
> change has broken the flexresp function and cannot be compiled any
> longer.
>
> My question is, is there an upcoming release of snort that will use the
> newly available libnet API?  There is also included with the libnet
> distribution a doc titled MIGRATION which discusses the changes to an
> applications source necessary to make it functional with the new
> release.  Unfortunately I'm not a programmer and am unable to make these
> changes myself, or so I strongly suspect!:-)
>
> Thank you,
> Clive
>
>
> -------------------------------------------------------
> This SF.NET email is sponsored by: AMD - Your access to the experts
> on Hammer Technology! Open Source & Linux Developers, register now
> for the AMD Developer Symposium. Code: EX8664
> http://www.developwithamd.com/developerlab
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


- --
http://www.snort.org/~jeff       (pgp key available)
"Great spirits have always encountered violent opposition from mediocre
minds."
- - Albert Einstein
    
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (OpenBSD)

iD8DBQE9mrbmEqr8+Gkj0/0RAv61AKCpZTTxgjtWHG2E9NydpL6rv9NfNgCgs200
RjeiEV0XxHNYemPjprXUkQI=
=DBKp
-----END PGP SIGNATURE-----



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users