Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort
Snort News Downloads Snort Docs Rules Snort Community Snort Forums Snort Training
Search Site
Search Rules
Account
email
password
not registered?
user preferences

Snort Forums Archive

Archive Home » Snort Development » Printing rules

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Printing rules


Posted by xsnorter on June 07, 2005 21:10:52

Hi,

I am a snort newbie. At startup snort reads the configuration file and initializes the RuleLists (RuleListNode * datatype) variable. For the debug purpose, is there any function that I can use to dump the rules populated in the RuleLists data structure ?

Thanks
Sridhar

Posted by roesch on June 28, 2005 12:00:13

If you run the configure script with '--enable-debug' then you can get the rule chains to dump by setting the SNORT_DEBUG environment variable to 2048. If you want to dump the chains programmatically from within Snort, you can use the DumpChain() function that's in detect.c.

-Marty


site feedback | Terms of Use | Privacy Policy | forum archives ©2008 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved.