int Preprocess(Packet * p) { int retval = 0; tSfPolicyId policy_id = getNapRuntimePolicy(); SnortPolicy *policy = snort_conf->targeted_policies[policy_id]; #ifdef PPM_MGR uint64_t pktcnt=0; #endif PROFILE_VARS; if (policy == NULL) return -1; #ifdef PPM_MGR /* Begin Packet Performance Monitoring */ if( PPM_PKTS_ENABLED() ) { pktcnt = PPM_INC_PKT_CNT(); PPM_GET_TIME(); PPM_INIT_PKT_TIMER(); #ifdef DEBUG if( PPM_DEBUG_PKTS() ) { /* for debugging, info gathering, so don't worry about * (unsigned) casting of pktcnt, were not likely to debug * 4G packets */ LogMessage("PPM: Process-BeginPkt[%u] caplen=%u\n", (unsigned)pktcnt,p->pkth->caplen); } #endif } #endif // If the packet has errors, we won't analyze it. if ( p->error_flags ) { // process any decoder alerts now that policy has been selected... DecodePolicySpecific(p); //actions are queued only for IDS case sfActionQueueExecAll(decoderActionQ); DEBUG_WRAP(DebugMessage(DEBUG_DETECT, "Packet errors = 0x%x, ignoring traffic!\n", p->error_flags););
int Preprocess(Packet * p) { int retval = 0; tSfPolicyId policy_id = getRuntimePolicy(); SnortPolicy *policy = snort_conf->targeted_policies[policy_id]; #ifdef PPM_MGR uint64_t pktcnt=0; #endif PROFILE_VARS; if (policy == NULL) return -1; #ifdef PPM_MGR /* Begin Packet Performance Monitoring */ if( PPM_PKTS_ENABLED() ) { pktcnt = PPM_INC_PKT_CNT(); PPM_GET_TIME(); PPM_INIT_PKT_TIMER(); if( PPM_DEBUG_PKTS() ) { /* for debugging, info gathering, so don't worry about * (unsigned) casting of pktcnt, were not likely to debug * 4G packets */ LogMessage("PPM: Process-BeginPkt[%u] caplen=%u\n", (unsigned)pktcnt,p->pkth->caplen); } } #endif // If the packet has errors, we won't analyze it. if ( p->error_flags ) { DEBUG_WRAP(DebugMessage(DEBUG_DETECT, "Packet errors = 0x%x, ignoring traffic!\n", p->error_flags););