Snort Forums Archive

Archive Home » Snort Development » About Detection Plugin Template

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

About Detection Plugin Template

Posted by nopp on November 24, 2005 03:14:02

I found in sp_template.c,
TemplateInit , TempleateRuleParsefunction .. etc, all are static method
comparing with of ther sp like sp_tcp_seq_check.c, the Init , parse method AREN"T static.

Could anyone tell me what is the importance of static in here ?

Thanks~~~~!!!!

Posted by brevizniak on November 28, 2005 16:52:54

static is a C notation stating the scope and Accessibility

This link might explain it for you.

http://publications.gbdirect.co.uk/c_book/chapter8/declarations_and_definitions.html

Posted by nopp on November 28, 2005 21:26:24

I would really feel thanks you answer my question, but I really hope
the answer can be more related to my question

I certainly know what is static
I just don't know why sp_tcp_seq_check.c 's method no static keyword
but default template have

Posted by brevizniak on December 03, 2005 10:13:58

Probably a better question for cmg but I suspect it is simply the person that wrote it was not concerned with limiting the accessibility.

Posted by nopp on December 06, 2005 05:03:55

Thanks for your reply.
could I know more about what is cmg?
and what's the accessibility for ?

Indeed I am quite young on programming.
I can figure out what snort's interal doing by checking the function calling, but it is too diffcult for me to realise such small things which may,however , critical for the snort running.

Please forgive my impolite for the previous post, if it is.

Thanks a lot~

Posted by brevizniak on December 06, 2005 06:42:22

cmg is the person that was in the commit line. He was a snort developer at the time. I do not think there is a subtle thing to be read into here.