==== Build
-* configure bombs on OSX with g++ wrapper to clang because g++ version < 4.8
-(compare g++ -dumpversion and g++ --version)
+* configure bombs on OSX with g\++ wrapper to clang because g++ version < 4.8
+(compare g\++ -dumpversion and g++ --version)
workaround: export CXX=clang++
* uricontent:"foo"; content:"bar"; -> http_uri; content:"foo"; content:"bar";
(missing pkt_data)
-* stream_tcp ports and protocols both go into a single
-binder.when; this is incorrect as the when fields are logically anded
-together (ie must all be true). should create 2 separate bindings.
+* stream_tcp ports and protocols both go into a single binder.when; this is
+incorrect as the when fields are logically anded together (ie must all be
+true). should create 2 separate bindings.
* There is a bug in pps_stream_tcp.cc.. when stream_tcp: is
specified without any arguments, snort2lua doesn't convert it
=== Modules
-The Module is pervasive in Snort++. It is how everything, including
+The Module is pervasive in Snort\++. It is how everything, including
plugins, are configured. It also provides access to builtin rules. And as
the glue that binds functionality to Snort++, the capabilities of a Module
are expected to grow to include statistics support, etc.
SIP preprocessor data to app ID. However, it remains a peripheral feature
and still requires the production of data that may not be consumed.
-The basic processing steps Snort++ takes are similar to Snort's as seen in
+The basic processing steps Snort\++ takes are similar to Snort's as seen in
the following diagram. The preprocess step employs specific inspector
types instead of a generalized list, but the basic procedure includes
stateless packet decoding, TCP stream reassembly, and service specific
Inspection events coupled with pluggable inspectors provide a very flexible
framework for implementing new features. And JIT buffer stuffers allow
-Snort++ to work smarter, not harder. These capabilities will be leveraged
+Snort\++ to work smarter, not harder. These capabilities will be leveraged
more and more as Snort++ development continues.
program specifically designed to convert Snort 2.9.X configuration files into
Lua files that Snort 3.0 can understand.
-Snort2Lua reads your legacy Snort conf file(s) and generates Snort\++ Lua
+Snort2Lua reads your legacy Snort conf file(s) and generates Snort++ Lua
and rules files. When running this program, the only mandatory option is
to provide Snort2Lua with a Snort configuration file. The default output
file file is snort.lua, the default error file will be snort.rej, and the
(aside from Fatal Snort2Lua errors), differences, and comments will omitted
from the final output file. Default mode will print everything. That mean
you will be able to see exactly what changes have occurred between Snort and
-Snort\++ in addition to the new syntax, the original file's comments, and
+Snort++ in addition to the new syntax, the original file's comments, and
all errors that have occurred. Finally, differences mode will not actually
output a valid Snort3.0 configuration. Instead, you can see the exact
options from the input configuration that have changed.
:toc-placement: manual
:toc-title: Contents
----------------
-:quotes.++:
----------------
-
image::snorty.png["Snorty",width="480"]
include::version.txt[]
toc::[]