Snort mailing list archives

[Snort++] Trying to integrate a custom Inspector


From: Ronin CS <ronincs17 () gmail com>
Date: Mon, 1 May 2017 18:14:56 -0300

Hello guys,

I'm trying to learn more about Snort++ and Inspectors as I develop my own
module to test on it, but I'm having a lot of issues while building the
extras again.

So far, I've created a super simple Inspector, that all it does is print
basic packet information everytime it goes through the "eval" method.

I'm taking the "DPX Inspector" as a basis for my Inspector, so I've created
a new folder inside /extra/inspectors, let's say, "test", and inside of it
I have the Inspector itself "test.cc" and two other files copied from "dpx"
directory, "CMakeLists.txt" and "Makefile.am".

I've modified these last two files to match my new Inspector. Same for the
files at /extra/inspectors.

But when I try to build it using "make", I receive:

make[4]: Leaving directory '/home/ronin/snort_src/snort3-
master/extra/src/inspectors/dpx'
make[3]: Leaving directory '/home/ronin/snort_src/snort3-
master/extra/src/inspectors/dpx'
Making install in test
make[3]: Entering directory '/home/ronin/snort_src/snort3-
master/extra/src/inspectors/test'
make[3]: *** No rule to make target 'install'.  Stop.
make[3]: Leaving directory '/home/ronin/snort_src/snort3-
master/extra/src/inspectors/test'
Makefile:369: recipe for target 'install-recursive' failed
make[2]: *** [install-recursive] Error 1
make[2]: Leaving directory '/home/ronin/snort_src/snort3-
master/extra/src/inspectors'
Makefile:373: recipe for target 'install-recursive' failed
make[1]: *** [install-recursive] Error 1
make[1]: Leaving directory '/home/ronin/snort_src/snort3-master/extra/src'
Makefile:407: recipe for target 'install-recursive' failed
make: *** [install-recursive] Error 1

To be honest, I don't know the correct way to do it (integrate a new
Inspector). I've searched for references but I couldn't find anything.

Ronin.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: