snort-devel March 2008 archive
Main Archive Page > Month Archives  > snort-devel archives
snort-devel: Re: [Snort-devel] Regarding otn_tmp

Re: [Snort-devel] Regarding otn_tmp

From: Steven Sturges <steve.sturges_at_nospam>
Date: Tue Mar 25 2008 - 13:03:25 GMT
To: snort user <snort.user@gmail.com>


Suggest you upgrade to a more recent version... 2.3 is about 4 years old at this point. :)

otn_tmp is a global that refers to the most recent rule that was being evaluated. So as to avoid data leak in later calls to Detect(), either from within the preprocessors or in the normal path, otn_tmp is set to NULL.

Cheers.

snort user wrote:
> Greetings.
>
> I am working with an older version of snort - 2.3 version.
>
> I see that there are certain places where Detect() is called from
> within preprocessors.
> Right after the call to Detect() otn_tmp is set to NULL.
>
> Can someone please enlighten me as to what is being done by setting
> otn_tmp to NULL.
>
> Thanks a lot !
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Snort-devel mailing list
> Snort-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
>



This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel