[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-devel
Subject:    Re: [Snort-devel] Packet versus SFSnortPacket
From:       Steven Sturges <steve.sturges () sourcefire ! com>
Date:       2009-09-08 21:41:50
Message-ID: 4AA6CF9E.9050802 () sourcefire ! com
[Download RAW message or body]

The layout is exactly the same in terms of field alignment.

The dynamic preprocessors that use the SFSnortPacket structure
only need certain fields from the Packet.  In order to not
pull in all of the data types for the various headers that
they do not require, SFSnortPacket declares those as void *.

snort user wrote:
> Hello!
> 
> Could anyone explain the reason for using SFSnortPacket as opposed to
> the Packet in dynamic preprocessor code. They seem to be almost exactly same.
> 
> Thanks !


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel
[prev in list] [next in list] [prev in thread] [next in thread]