Skip to content

Add Windows support for LibDAQ - #43

Open
Mahbodbe wants to merge 1 commit into
snort3:masterfrom
Mahbodbe:windows-support
Open

Mahbodbe wants to merge 1 commit into
snort3:masterfrom
Mahbodbe:windows-support

Conversation

@Mahbodbe

@Mahbodbe Mahbodbe commented Sep 5, 2026

Copy link
Copy Markdown

Summary

Add Windows support for LibDAQ dynamic module loading.

Changes

  • Add Windows implementations of dynamic library loading using LoadLibraryA, GetProcAddress, and FreeLibrary.
  • Keep the existing POSIX dlopen/dlsym/dlclose path unchanged on non-Windows platforms.
  • Abstract dynamic loader operations behind daq_dlopen, daq_dlsym, daq_dlclose, and daq_dlerror.
  • Detect .dll DAQ modules on Windows while retaining .so detection on POSIX systems.

Validation

Tested on Windows 10 Enterprise 64-bit with:

  • Snort 3.12.2.0
  • LibDAQ 3.0.27
  • Npcap 1.88
  • MSYS2 UCRT64

Verified that daq_pcap.dll is discovered and loaded successfully and that Snort can capture live traffic and trigger an ICMP detection rule.

Only api/daq_base.c is changed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant