Snort mailing list archives
Re: Snort inline and ip_queue
From: neil <neil () bellsimons com>
Date: Fri, 19 Mar 2004 10:19:05 -0500
Never-mind. Bridge was not acting right On Tue, 2004-03-16 at 10:32, neil wrote:
I have installed snort_inline, and have ip_queue installed as a module, after some tweaking to the .conf file I have snort_inline fired up now, but none of my tests are generating logs or seem to be working, it seems nothing is being passed from iptables to the user space queue. I wasn't really sure what I should have as a rule in iptables, so I used this: iptables -A FORWARD -i eth0 -j QUEUE and it is the only rule. Anyone know what I am missing here? (I have snort working as a regular sniffer / IDS on many other systems, but I was looking for real-time sig based IPS functionality) Thanks in advance Nox www.pheusion.com ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort inline and ip_queue neil (Mar 19)
- Re: Snort inline and ip_queue neil (Mar 19)
- Re: Snort inline and ip_queue Stephan Scholz (Mar 23)
- Re: Snort inline and ip_queue Ravi (Mar 23)