Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort
Snort News Downloads Snort Docs Rules Snort Community Snort Forums Snort Training
Search Site
Search Rules
Account
email
password
not registered?
user preferences

Snort Forums Archive

Archive Home » Snort Development » Splitting snort source code

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Splitting snort source code


Posted by Sindhu on December 08, 2005 21:27:40

hi,
I am doing my research project in adding fault tolerent capabilities to an IDS. For this purpose I am about to use Snort as the base IDS.

For this I need to split the source code into 4 modules.

Sniffing -> Pkt capture
Analysis -> pkt decoder and preprocessor
Desision -> Detection engine
Reporting -> Output plugin

Can anybody give me guidence regarding this

Thanks and regrads



Posted by brevizniak on December 10, 2005 08:48:01

src/snort.c
src/decode.c
src/preprocessors/*
src/detection-plugins/*
src/output-plugins/*

site feedback | Terms of Use | Privacy Policy | forum archives ©2007 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved.