Snort mailing list archives

*.rules files parsing


From: alessandrorguard-snortml () yahoo it
Date: Thu, 19 Nov 2009 12:47:31 +0000 (GMT)

During some testing with parser.c it comes out that the rules files
included in the snort.conf file gets included 2 times: the first in
ParseSnortConf(), then in ParseRules().
Is it correct?
What are the differences in the two steps?
Could any developer tell the structure of the parsed rules? The only documentation I’m finding on the net seems to be 
obsolete…
Thanks!

Alessandro R



      

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Current thread: