Re: Snort Kernel Module

[Ravi Kumar <ravivsn () roc co in>]

HI Josh Berry,
As far as I know there are some vendors who have developed IPS in kernel. 
Implementing IPS in kernel module will reduce the overhead of copying 
packets to user space (and to kernel space in case of IPS).  For more 
information on Kernel module IIPS solutions Visit
Intoto website http://intotoinc.com
Regards,
Ravi


At 01:04 PM 10/6/03 -0500, Josh Berry wrote:
> Are there any projects out there that are trying to move snort into the
> Linux kernel, or as a kernel loadable module.  Would this provide any
> benefits (security, speed, accuracy)?  Is there any reason this would not
> be possible?  Would this be incredibly difficult?
>
>
> Thanks,
> Josh Berry
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

The Views Presented in this mail are completely mine. The company is not 
responsible for what so ever.

----------
Ravi Kumar CH
Rendezvous On Chip (I) Pvt Ltd
Hyderabad, INDIA

ROC HOME PAGE:
http://www.roc.co.in




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users