Snort mailing list archives

snort3: Active: active.device is mandatory


From: Meridoff via Snort-devel <snort-devel () lists snort org>
Date: Tue, 15 Oct 2019 14:08:50 +0300

Hello, if I not configured active.device we have in Active::open (char
*dev) :

*    if ( dev && strcasecmp(dev, "ip") )*
*    {*
*        s_link = eth_open(dev);*
*...*
So here we trying to eth_open for empty device.

May be change for that if no device specifed - we using "ip":

For example:
*    if ( dev && strlen(dev)  && strcasecmp(dev, "ip") )*
*    {*
*        s_link = eth_open(dev);*

...
_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: