Re: Snort Inline on Redhat 9

[tslighter <tslighter () itc nrcs usda gov>]

Michael Little wrote:

> Does anyone know if there is an article or readme on how to set up 
> snort-inline on Redhat 9? I have found some on Redhat 8 but not 9. 
> Just curious if the steps are the same as I am having difficulties 
> installing the iptables and recompiling the Kernel.
>
> Thanks,
>
> Mike Little
One other point that I would like to make that "could" apply.  There may 
be a problem with the ip_conntrack when using Rehat and snort-inline on 
a SMP kernel.  The connection track bucket never empties and fills up 
the log queue equal to the number of events that are logged to the 
iptables queue as specified by iptables -QUEUE.  This may have been an 
isolated incident but could not reproduce this problem on a single 
processor system. 



-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users