Installation file for the Spade v092200.1
-----------------------------------------

Author: Jim Hoagland (hoagland@SiliconDefense.com)

This file contains information about how to install the Statistical Packet
Anomaly Detection Engine (Spade), spp_anomsensor.


-= Installation =-

This is what you will need to do to use Spade:

1)  Copy spp_anomsensor.c and spp_anomsensor.h to the directory with the snort
source code (e.g., the directory with snort.c)

2)  Add the line

#include "spp_anomsensor.h"

to plugbase.h

3)  Edit plugbase.c and add "SetupSpade();" to the InitPreprocessors()
function

4)  Edit Makefile.am and add spp_anomsensor.c and spp_anomsensor.h to the
snort_SOURCES line.

5)  Recompile snort (e.g., run make)

Installing will be easier to do at some point.

You may also want to establish a directory in which Spade (while running) can
create a log file and a state file.  The permissions will need to be such that
the snort process can read and create/write these files.
