Snort - the de facto standard for intrusion detection/prevention
the de facto standard in IPS  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort
Snort News Snort Downloads Snort Rules Snort Docs Snort Training Snort Forums Snort Community Snort Store
Search Site
Search Rules
Account
email
password
not registered?
can't login?
user preferences
next up previous contents
Next: 3. Writing Snort Rules: Up: 2. Configuring Snort Previous: 2.3 Output Modules   Contents

Subsections

2.4 Dynamic Modules

Dynamically loadable modules were introduced with Snort 2.6. They can be loaded via directives in snort.conf or via command-line options.

Note:   To use dynamic modules, Snort must be configured with the -enable-dynamicplugin flag.

2.4.1 Format 

<directive> <parameters>

2.4.2 Directives


Table: Dynamic Directives
Directive Syntax Description
dynamicpreprocessor dynamicpreprocessor $[$ file $<$shared library path$>$ $\vert$ directory $<$directory of shared libraries$>$ $]$ Tells snort to load the dynamic preprocessor shared library (if file is used) or all dynamic preprocessor shared libraries (if directory is used). Specify 'file', followed by the full or relative path to the shared library. Or, specify 'directory, followed by the full or relative path to a directory of preprocessor shared libraries. (Same effect as -dynamic-preprocessor-lib or -dynamic-preprocessor-lib-dir options). See chapter [*] for more information on dynamic preprocessor libraries.
dynamicengine dynamicengine $<$shared library path$>$ Tells snort to load the dynamic engine shared library. Specify the full or relative path to the shared library. (Same effect as -dynamic-engine-lib option). See chapter [*] for more information on dynamic engine libraries.
dynamicdetection dynamicdetection $[$ file $<$shared library path$>$ $\vert$ directory $<$directory of shared libraries$>$ $]$ Tells snort to load the dynamic detection rules shared library (if file is used) or all dynamic detection rules shared libraries (if directory is used). Specify 'file', followed by the full or relative path to the shared library. Or, specify 'directory, followed by the full or relative path to a directory of detection rules shared libraries. (Same effect as -dynamic-detection-lib or -dynamic-detection-lib-dir options). See chapter [*] for more information on dynamic detection rules libraries.

next up previous contents
Next: 3. Writing Snort Rules: Up: 2. Configuring Snort Previous: 2.3 Output Modules   Contents
site feedback | Terms of Use | Privacy Policy | forum archives ©2008 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved.