-- updated config_changes.txt
-- fixed doc format and added errors.txt
-- revised help options (again) to be more consistent with other (gnu style) programs
+-- added overview page to documentation
+-- pulled in latest from Josh
121
-- valgrind fixes
set (UNBUILT_SOURCES
snort_manual.txt
+ overview.txt
errors.txt
differences.txt
+ plugins.txt
style.txt
tips.txt
- plugins.txt
# config_changes.txt If ruby executable is NOT found
)
unbuilt_sources = \
snort_manual.txt \
+overview.txt \
config_changes.txt \
errors.txt \
differences.txt \
$(snort) --markup --help-config | sort -k 3 > $@
gids.txt: $(snort)
- $(snort) --markup --help-gids | sort -n -k 1.4 > $@
+ $(snort) --markup --list-gids | sort -n -k 1.4 > $@
modules.txt: $(snort)
for m in `$(snort) --list-modules` ; do \
-Snort++ uses a variety of plugins to accomplish much of its processing
+Snort\++ uses a variety of plugins to accomplish much of its processing
objectives, including:
* Codec - to decode and encode packets
pointers for constructing and destructing a Module. The specific API add
various other data and functions for their given roles.
-The Module is pervasive in Snort\+\+. It is how everything, including
+The Module is pervasive in Snort++. It is how everything, including
plugins, are configured. It also provides access to builtin rules. And as
the glue that binds functionality to Snort++, the capabilities of a Module
are expected to grow to include statistics support, etc.
toc::[]
+== Overview
+
+include::overview.txt[]
+
== Getting Started
include::tips.txt[]
The following pointers will help you get started:
-=== Building
+=== Dependencies
+
+Required:
+
+* autotools or cmake to build from source.
+
+* daq from snort.org for packet IO.
+
+* luajit from luajit.org for configuration and scripting.
+
+* pcap from http://www.tcpdump.org for tcpdump logging.
+
+* pcre from http://www.pcre.org for regex pattern matching.
+
+* dnet from http://code.google.com/p/libdnet/ for network utility
+ functions.
-* You need luajit from luajit.org; build from source.
+* zlib from http://www.zlib.net for decompression.
+
+Optional:
+
+* asciidoc from http://www.methods.co.nz/asciidoc/ to build the html
+ manual.
+
+* dblatex from http://dblatex.sourceforge.net to build the pdf manual (in
+ addition to asciidoc).
+
+* check from http://check.sourceforge.net to build unit tests.
+
+=== Building
* You should build Snort++ with --prefix $install_dir where install_dir is
something you can easily delete.
-* If you want to build the documentation, you will need to install
- asciidoc. You will also need dblatex to build the pdf manual.
-
* To build with cmake and make, first create a separate directory for the
build and cd into that directory. Then:
const string& Markup::sanitize(const char* const c)
{ return sanitize(string(c)); }
+// FIXIT-L these escapes are emitted directly by asciidoc 8.6.9.
const string& Markup::sanitize(const string& s)
{
const char* const asciidoc_chars = "~*<>^'";
case PktType::UDP:
Active_DropSession();
_Active_ForceIgnoreSession(p);
+ default:
+ break;
}
return 0;
}
/* Lookup a ICMP session */
ssn = Stream::get_session(&skey);
break;
+ default:
+ break;
}
if (ssn)
case PktType::ICMP:
ft->ipprotocol = protocolReferenceICMP;
break;
+ default:
+ break;
}
host_entry = SFAT_LookupHostEntryBySrc(p);
case PktType::ICMP:
flow->s5_state.ipprotocol = protocolReferenceICMP;
break;
+
+ default:
+ break;
}
}