Snort Forums Archive

Archive Home » Snort Development » snort output plugins

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

snort output plugins

Posted by tkoo on March 14, 2005 17:57:48

hi,

since the unix domain socket output plugin doesn't exist in windows, I am trying to write an output plugin for win32 which uses named pipe. I couldn't figure out how to debug with the debug flag in the code. It seems like even though the debug flag is put on, I could not figure out where to view the entries for DebugMessages. I know I am just missing something really simple here. Anything would help. Thanks.

Tristan

Posted by roesch on March 19, 2005 18:01:56

You need to key your DebugMessage()'s to a environmental variable. Check out debug.h. If you want to see the messages that fire for the STREAM_STATE debug messages, you need to set SNORT_DEBUG=8388608 in the environment of the shell that Snort will be executed from. Also check out the BUGS file, it may be able to help you.

-Marty