Snort mailing list archives

External DAQ Modules


From: Michael Altizer <maltizer () sourcefire com>
Date: Sat, 15 Jan 2011 02:36:20 -0500

Have you ever wanted to maintain your own DAQ module outside of the official LibDAQ distribution? Concerned about the official release cycle in relation to your own development? Tired of keeping a source patch for the official distribution up-to-date?
Well, today is your lucky day!

I've attached two tarballs to this e-mail to demonstrate the suggested process for externalizing the DAQ module build process. Example-daq-module-0.1.tar.gz is a bare bones example DAQ module and the autotools to support it, while pfring-daq-module-0.1.tar.gz is a port of Luca Deri's PF_RING DAQ module to this standalone framework.

The basic steps involved in taking example-daq-module and making it your own are:
1. Unpack example-daq-module-0.1.tar.gz
2. Rename daq_example.c to daq_<your module name>.c
3. Implement all of the function stubs in the C file
4. Update configure.ac and Makefile.am to reflect your name change (%s/example/<your module name>/g) 5. Add any additional autoconf-foo you want to configure.ac (arguments, header checks, library checks, etc)
6. Regenerate the autoconf files with 'autoreconf -ivf'
7. Configure, make, and make install!

The only caveat with this process is that you cannot include your DAQ module with the static DAQ modules when building externally. This should not be an issue for the majority of users.

-Michael

Attachment: example-daq-module-0.1.tar.gz
Description:

Attachment: pfring-daq-module-0.1.tar.gz
Description:

------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Current thread: