[Snort++] Trying to integrate a custom Inspector
Ronin CS <[email protected]>
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <CADvVe_5B=hwzS_Warp28yDLizBuBacneOMqyqv2=a3EE_+4v6A@mail.gmail.com> |
Hello guys, I'm trying to learn more about Snort++ and Inspectors as I develop my own module to test on it, but I'm having a lot of issues while building the extras again. So far, I've created a super simple Inspector, that all it does is print basic packet information everytime it goes through the "eval" method. I'm taking the "DPX Inspector" as a basis for my Inspector, so I've created a new folder inside /extra/inspectors, let's say, "test", and inside of it I have the Inspector itself "test.cc" and two other files copied from "dpx" directory, "CMakeLists.txt" and "Makefile.am". I've modified these last two files to match my new Inspector. Same for the files at /extra/inspectors. But when I try to build it using "make", I receive: make[4]: Leaving directory '/home/ronin/snort_src/snort3- master/extra/src/inspectors/dpx' make[3]: Leaving directory '/home/ronin/snort_src/snort3- master/extra/src/inspectors/dpx' Making install in test make[3]: Entering directory '/home/ronin/snort_src/snort3- master/extra/src/inspectors/test' make[3]: *** No rule to make target 'install'. Stop. make[3]: Leaving directory '/home/ronin/snort_src/snort3- master/extra/src/inspectors/test' Makefile:369: recipe for target 'install-recursive' failed make[2]: *** [install-recursive] Error 1 make[2]: Leaving directory '/home/ronin/snort_src/snort3- master/extra/src/inspectors' Makefile:373: recipe for target 'install-recursive' failed make[1]: *** [install-recursive] Error 1 make[1]: Leaving directory '/home/ronin/snort_src/snort3-master/extra/src' Makefile:407: recipe for target 'install-recursive' failed make: *** [install-recursive] Error 1 To be honest, I don't know the correct way to do it (integrate a new Inspector). I've searched for references but I couldn't find anything. Ronin. ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Snort-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/snort-devel Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel Please visit http://blog.snort.org for the latest news about Snort!