Re: [Snort-users] snort as dynamic library
Michael Prujan via Snort-devel <[email protected]> Thu, 10 Oct 2019 08:34:45 +0300
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <CAF6TG=0dx0yxk8GgegrDxwv6JXQFObnJZhrfMwOheSBxwHFfRQ__23632.8010608972$1570804243$gmane$org@mail.gmail.com> |
--===============2988035742214294107== Content-Type: multipart/alternative; boundary="000000000000fa02c5059487c2bf" --000000000000fa02c5059487c2bf Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, Oct 9, 2019 at 11:03 PM Michael Prujan <[email protected]> wrote: > Hi Russ, > I want to use snort for production(*2.9.14.*.) and not version 3.0(beta). > I have the application that reading the traffic , based on dpdk. > the application is multithreaded. > Every thread is running on different core. > every thread completes the same job:reading packet, parsing and call > utilities for packet inspection. > Now i want to add utility based on snort. > In that case snort utility can use other functionality of thread. > So i need to compile my executable with snort as a library(shared or > static). > And use snort api for packet processing. > As i understood from your previous email, it's impossible to compile snor= t > as a library. > Do you have any plan for the future ? > Thanks, > michael. > > > > On Mon, Oct 7, 2019 at 6:18 PM Russ Combs (rucombs) <[email protected]> > wrote: > >> Hi Michael, >> >> >> >> Snort isn=E2=80=99t designed to support that yet, but please outline you= r goal in >> an email to snort-devel and we can kick it around. >> >> >> >> Thanks >> >> Russ >> >> >> >> *From: *Snort-users <[email protected]> on behalf of >> Michael Prujan via Snort-users <[email protected]> >> *Reply-To: *Michael Prujan <[email protected]> >> *Date: *Monday, October 7, 2019 at 2:03 AM >> *To: *Dorian ROSSE <[email protected]> >> *Cc: *"[email protected]" <[email protected]> >> *Subject: *Re: [Snort-users] snort as dynamic library >> >> >> >> Hi Dorian, >> >> Thanks for reply. >> >> To clarify my question: >> >> How can i compile snort as library and not as executable. >> >> I want to run snort in context of other process. >> >> Is it possible ? >> >> What the changes should i done ? >> >> Thanks again, >> >> Michael. >> >> >> >> >> >> On Thu, Oct 3, 2019 at 5:48 PM Dorian ROSSE <[email protected]> >> wrote: >> >> For run snort all the time (seems be one of yours ask) you should set up >> as a daemon: >> >> >> >> http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node11.html >> >> >> >> Snort dynamic modes : >> >> >> >> http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node38.html >> >> >> >> >> >> Read me daq explain succinctly static / dynamic mod >> >> >> >> https://www.snort.org/faq/readme-daq >> >> >> >> Sorry to send three links but I haven't understood yours ask >> >> >> >> I hope I have the truth about yours ask, >> >> >> >> Regards. >> >> >> >> >> >> Dorian rosse. >> >> >> >> T=C3=A9l=C3=A9charger Outlook pour Android <https://aka.ms/ghei36> >> ------------------------------ >> >> *From:* Snort-users <[email protected]> on behalf of >> Michael Prujan via Snort-users <[email protected]> >> *Sent:* Sunday, September 29, 2019 4:27:26 PM >> *To:* [email protected] <[email protected]> >> *Subject:* [Snort-users] snort as dynamic library >> >> >> >> Hi, >> >> I =E2=80=98ve just started using snort. >> >> I=E2=80=99ve downloaded sources snort 2.9.14.1 and compiled. >> >> I understood that snort run as a process. >> >> Can i run snort as utility in my process ? >> >> Can I create static/dynamic library from snort sources ? >> >> If yes , what should I change in makefiles? >> >> Thanks, >> >> Michael. >> >> --000000000000fa02c5059487c2bf Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" = class=3D"gmail_attr">On Wed, Oct 9, 2019 at 11:03 PM Michael Prujan <<a = href=3D"mailto:[email protected]">[email protected]</a>> w= rote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0p= x 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir= =3D"ltr">Hi=C2=A0Russ,<div>I want to use snort for production(<b>2.9.14.</b= >.) and not version 3.0(beta).</div><div>I have the application that readin= g=C2=A0the traffic , based on dpdk.</div><div>the application=C2=A0is multi= threaded.</div><div>Every thread is running on different=C2=A0core.</div><d= iv>every thread completes the same job:reading packet, parsing and call uti= lities for packet inspection.</div><div>Now i want to add utility based on = snort.</div><div>In that case snort utility can use other functionality of = thread.</div><div>So i need to compile my executable with snort as a librar= y(shared or static).</div><div>And use snort api for packet processing.</di= v><div>As i understood=C2=A0from your previous email, it's impossible t= o compile snort as a library.</div><div>Do you have any plan for the future= ?</div><div>Thanks,</div><div>michael.</div><div><br><div><br></div></div>= </div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">= On Mon, Oct 7, 2019 at 6:18 PM Russ Combs (rucombs) <<a href=3D"mailto:r= [email protected]" target=3D"_blank">[email protected]</a>> wrote:<br></d= iv><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bord= er-left:1px solid rgb(204,204,204);padding-left:1ex"> <div lang=3D"EN-US"> <div> <p class=3D"MsoNormal">Hi Michael,<u></u><u></u></p> <p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p> <p class=3D"MsoNormal">Snort isn=E2=80=99t designed to support that yet, bu= t please outline your goal in an email to snort-devel and we can kick it ar= ound.<u></u><u></u></p> <p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p> <p class=3D"MsoNormal">Thanks<u></u><u></u></p> <p class=3D"MsoNormal">Russ<u></u><u></u></p> <p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p> <div style=3D"border-right:none;border-bottom:none;border-left:none;border-= top:1pt solid rgb(181,196,223);padding:3pt 0in 0in"> <p class=3D"MsoNormal"><b><span style=3D"font-size:12pt;color:black">From: = </span></b><span style=3D"font-size:12pt;color:black">Snort-users <<a hr= ef=3D"mailto:[email protected]" target=3D"_blank">snort-u= [email protected]</a>> on behalf of Michael Prujan via Snort-= users <<a href=3D"mailto:[email protected]" target=3D"_blank">= [email protected]</a>><br> <b>Reply-To: </b>Michael Prujan <<a href=3D"mailto:michael.prujan@gmail.= com" target=3D"_blank">[email protected]</a>><br> <b>Date: </b>Monday, October 7, 2019 at 2:03 AM<br> <b>To: </b>Dorian ROSSE <<a href=3D"mailto:[email protected]" targe= t=3D"_blank">[email protected]</a>><br> <b>Cc: </b>"<a href=3D"mailto:[email protected]" target=3D"_= blank">[email protected]</a>" <<a href=3D"mailto:snort-us= [email protected]" target=3D"_blank">[email protected]</a>><= br> <b>Subject: </b>Re: [Snort-users] snort as dynamic library<u></u><u></u></s= pan></p> </div> <div> <p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p> </div> <div> <p class=3D"MsoNormal">Hi=C2=A0Dorian, <u></u><u></u></p> <div> <p class=3D"MsoNormal">Thanks for reply.<u></u><u></u></p> </div> <div> <p class=3D"MsoNormal">To clarify my question:<u></u><u></u></p> </div> <div> <p class=3D"MsoNormal">How can i compile snort as library and not as execut= able.<u></u><u></u></p> </div> <div> <p class=3D"MsoNormal">I want to run snort in context of other process.<u><= /u><u></u></p> </div> <div> <p class=3D"MsoNormal">Is it possible ?<u></u><u></u></p> </div> <div> <p class=3D"MsoNormal">What the changes should i done ?<u></u><u></u></p> </div> <div> <p class=3D"MsoNormal">Thanks again,<u></u><u></u></p> </div> <div> <p class=3D"MsoNormal">Michael.<u></u><u></u></p> </div> <div> <p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p> </div> </div> <p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p> <div> <div> <p class=3D"MsoNormal">On Thu, Oct 3, 2019 at 5:48 PM Dorian ROSSE <<a h= ref=3D"mailto:[email protected]" target=3D"_blank">dorianbrice@hotmail= .fr</a>> wrote:<u></u><u></u></p> </div> <blockquote style=3D"border-top:none;border-right:none;border-bottom:none;b= order-left:1pt solid rgb(204,204,204);padding:0in 0in 0in 6pt;margin-left:4= .8pt;margin-right:0in"> <div> <div> <div> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)">For run snort all the time (seems be one of yours ask) you shoul= d set up as a daemon:<u></u><u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><u></u>=C2=A0<u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><a href=3D"http://manual-snort-org.s3-website-us-east-1.amazonaw= s.com/node11.html" target=3D"_blank">http://manual-snort-org.s3-website-us-= east-1.amazonaws.com/node11.html</a><u></u><u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><u></u>=C2=A0<u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)">Snort dynamic modes :<u></u><u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><u></u>=C2=A0<u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><a href=3D"http://manual-snort-org.s3-website-us-east-1.amazonaw= s.com/node38.html" target=3D"_blank">http://manual-snort-org.s3-website-us-= east-1.amazonaws.com/node38.html</a><u></u><u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><u></u>=C2=A0<u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><u></u>=C2=A0<u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)">Read me daq explain succinctly static / dynamic mod<u></u><u></u= ></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><u></u>=C2=A0<u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><a href=3D"https://www.snort.org/faq/readme-daq" target=3D"_blan= k">https://www.snort.org/faq/readme-daq</a><u></u><u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><u></u>=C2=A0<u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)">Sorry to send three links but I haven't understood yours ask= <u></u><u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><u></u>=C2=A0<u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)">I hope I have the truth about yours ask,=C2=A0<u></u><u></u></sp= an></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><u></u>=C2=A0<u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)">Regards.=C2=A0<u></u><u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><u></u>=C2=A0<u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)"><u></u>=C2=A0<u></u></span></p> <p class=3D"MsoNormal" style=3D"background:white"><span style=3D"color:rgb(= 33,33,33)">Dorian rosse.=C2=A0<u></u><u></u></span></p> <div id=3D"gmail-m_2932471774594621320gmail-m_-600900431906153572gmail-m_53= 18029302556278902gmail-m_6869184245116126390ms-outlook-mobile-signature"> <p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p> <p class=3D"MsoNormal">T=C3=A9l=C3=A9charger <a href=3D"https://aka.ms/ghei= 36" target=3D"_blank"> Outlook pour Android</a><u></u><u></u></p> </div> </div> </div> <div class=3D"MsoNormal" align=3D"center" style=3D"text-align:center"> <hr size=3D"0" width=3D"100%" align=3D"center"> </div> <div id=3D"gmail-m_2932471774594621320gmail-m_-600900431906153572gmail-m_53= 18029302556278902gmail-m_6869184245116126390divRplyFwdMsg"> <p class=3D"MsoNormal"><b><span style=3D"color:black">From:</span></b><span= style=3D"color:black"> Snort-users <<a href=3D"mailto:snort-users-bounc= [email protected]" target=3D"_blank">[email protected]</= a>> on behalf of Michael Prujan via Snort-users <<a href=3D"mailto:[email protected]" target=3D"_blank">snort= [email protected]</a>><br> <b>Sent:</b> Sunday, September 29, 2019 4:27:26 PM<br> <b>To:</b> <a href=3D"mailto:[email protected]" target=3D"_blank"= >[email protected]</a> <<a href=3D"mailto:[email protected]= ort.org" target=3D"_blank">[email protected]</a>><br> <b>Subject:</b> [Snort-users] snort as dynamic library</span> <u></u><u></u= ></p> <div> <p class=3D"MsoNormal">=C2=A0<u></u><u></u></p> </div> </div> <div> <div> <div> <div> <div style=3D"margin-top:6pt;font-size:0.875rem" id=3D"gmail-m_293247177459= 4621320gmail-m_-600900431906153572gmail-m_5318029302556278902gmail-m_686918= 4245116126390gmail-:29w"> <div id=3D"gmail-m_2932471774594621320gmail-m_-600900431906153572gmail-m_53= 18029302556278902gmail-m_6869184245116126390gmail-:29v"> <div> <p class=3D"MsoNormal">Hi,<u></u><u></u></p> <p class=3D"MsoNormal">I =E2=80=98ve just started using snort.<u></u><u></u= ></p> <p class=3D"MsoNormal">I=E2=80=99ve downloaded sources =C2=A0snort 2.9.14.1= and compiled.<u></u><u></u></p> <p class=3D"MsoNormal">I understood that snort run as a process.<u></u><u><= /u></p> <p class=3D"MsoNormal">Can i run snort as utility=C2=A0in my process ?<u></= u><u></u></p> <p class=3D"MsoNormal">Can I create static/dynamic library<span style=3D"co= lor:rgb(31,73,125)">=C2=A0from snort sources</span>=C2=A0?<u></u><u></u></p= > <p class=3D"MsoNormal">If yes , what should I change in makefiles?<u></u><u= ></u></p> </div> </div> </div> </div> </div> <p class=3D"MsoNormal">Thanks, <u></u><u></u></p> <div> <p class=3D"MsoNormal">Michael.<u></u><u></u></p> </div> </div> </div> </div> </blockquote> </div> </div> </div> </blockquote></div> </blockquote></div> --000000000000fa02c5059487c2bf-- --===============2988035742214294107== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Snort-devel mailing list [email protected] https://lists.snort.org/mailman/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort! --===============2988035742214294107==--