Snort mailing list archives
External DAQ Modules
From: Michael Altizer <maltizer () sourcefire com>
Date: Sat, 15 Jan 2011 02:36:20 -0500
Have you ever wanted to maintain your own DAQ module outside of the official LibDAQ distribution? Concerned about the official release cycle in relation to your own development? Tired of keeping a source patch for the official distribution up-to-date?
Well, today is your lucky day!I've attached two tarballs to this e-mail to demonstrate the suggested process for externalizing the DAQ module build process. Example-daq-module-0.1.tar.gz is a bare bones example DAQ module and the autotools to support it, while pfring-daq-module-0.1.tar.gz is a port of Luca Deri's PF_RING DAQ module to this standalone framework.
The basic steps involved in taking example-daq-module and making it your own are:
1. Unpack example-daq-module-0.1.tar.gz 2. Rename daq_example.c to daq_<your module name>.c 3. Implement all of the function stubs in the C file4. Update configure.ac and Makefile.am to reflect your name change (%s/example/<your module name>/g) 5. Add any additional autoconf-foo you want to configure.ac (arguments, header checks, library checks, etc)
6. Regenerate the autoconf files with 'autoreconf -ivf' 7. Configure, make, and make install!The only caveat with this process is that you cannot include your DAQ module with the static DAQ modules when building externally. This should not be an issue for the majority of users.
-Michael
Attachment:
example-daq-module-0.1.tar.gz
Description:
Attachment:
pfring-daq-module-0.1.tar.gz
Description:
------------------------------------------------------------------------------ Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel
Current thread:
- External DAQ Modules Michael Altizer (Jan 14)