Re: snort3: Active: active.device is mandatory

--===============0408957804203252351==
Content-Type: multipart/alternative; boundary="0000000000004c26c90594f10ce9"

--0000000000004c26c90594f10ce9
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Currently if I not cofigured active {}, using defaults for example I have
such thing in log:

" FATAL ERROR: Active response: can't open "


=D0=B2=D1=82, 15 =D0=BE=D0=BA=D1=82. 2019 =D0=B3. =D0=B2 14:08, Meridoff <o=
[email protected]>:

> Hello, if I not configured active.device we have in Active::open (char
> *dev) :
>
> *    if ( dev && strcasecmp(dev, "ip") )*
> *    {*
> *        s_link =3D eth_open(dev);*
> *...*
> So here we trying to eth_open for empty device.
>
> May be change for that if no device specifed - we using "ip":
>
> For example:
> *    if ( dev && strlen(dev)  && strcasecmp(dev, "ip") )*
> *    {*
> *        s_link =3D eth_open(dev);*
>
> ...
>

--0000000000004c26c90594f10ce9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div>Currently if I not cofigured active =
{}, using defaults for example I have such thing in log:</div><div><br></di=
v><div>&quot; FATAL ERROR: Active response: can&#39;t open &quot;=C2=A0</di=
v><div><br></div></div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr=
" class=3D"gmail_attr">=D0=B2=D1=82, 15 =D0=BE=D0=BA=D1=82. 2019 =D0=B3. =
=D0=B2 14:08, Meridoff &lt;<a href=3D"mailto:[email protected]">oagvozd@gma=
il.com</a>&gt;:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:=
0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">=
<div dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr">Hello, if I not configur=
ed active.device we have in Active::open (char *dev) :<div><i><br></i></div=
><div><div><i>=C2=A0 =C2=A0 if ( dev &amp;&amp; strcasecmp(dev, &quot;ip&qu=
ot;) )</i></div><div><i>=C2=A0 =C2=A0 {</i></div><div><i>=C2=A0 =C2=A0 =C2=
=A0 =C2=A0 s_link =3D eth_open(dev);</i></div></div><div><i>...</i></div><d=
iv>So here we trying to eth_open for empty device.</div><div><br></div><div=
>May be change for that if no device specifed - we using &quot;ip&quot;:</d=
iv><div><br></div><div><div>For example:</div><div><div><i>=C2=A0 =C2=A0 if=
 ( dev &amp;&amp; strlen(dev) =C2=A0&amp;&amp; strcasecmp(dev, &quot;ip&quo=
t;) )</i></div><div><i>=C2=A0 =C2=A0 {</i></div><div><i>=C2=A0 =C2=A0 =C2=
=A0 =C2=A0 s_link =3D eth_open(dev);</i></div></div><div><br></div><div>...=
</div></div></div></div></div>
</blockquote></div>

--0000000000004c26c90594f10ce9--

--===============0408957804203252351==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

--===============0408957804203252351==--