Bug/Feature request for --plugin-path on Snort3

[Noah Dietrich <noah_dietrich () 86penny org>]

Snort team:
this is a bug (or feature request) with the --plugin-path option with
Snort3 (currently running the latest 3.1.6.0 on Ubuntu)

Let me know if I'm doing this wrong, and there's a better way.

The issue I have is that when I want to use both snort_extras and
pre-compiled rules when running Snort: I have to make sure to place both
folders in the same place.

Since snort_extras installs to /usr/local/lib/snort_extra/, that means that
I have to either store my so_rules folder in that folder, or create a new
folder to house both items.  I've been saving my .so rules to
/usr/local/etc/so_rules/, becuause this seems like a more logical place for
it (i've also got a rules and lists folder in /usr/local/etc/ as well, so
everything is in the same place.

It would be nice if the SO rules could be either loaded from within my
snort.lua, or if the --plugin-path could be specified more than once on the
command Line (this is less desirable, as it would tend to make the command
line invocation longer and messier).


Thanks
Noah

_______________________________________________
Snort-devel mailing list
Snort-devel () lists snort org
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!