Snort mailing list archives

Re: 2.3RC2, inline, faq?


From: Will Metcalf <william.metcalf () gmail com>
Date: Tue, 4 Jan 2005 23:36:18 -0600

Did you apply iptables p-o-m to your kernel sources?  The problem is
snort reading packets from ip_queue in the IpqLoop in inline.c, not
something that can be fixed with changes to your snort_inline.conf....

cat /proc/net/ip_queue 

and send us back your results......

Regards,

Will


On Tue, 4 Jan 2005 20:55:22 -0800 (PST), slesru <slesru () yahoo com> wrote:

--- Will Metcalf <william.metcalf () gmail com> wrote:

change

config checksum_mode: all

to

config checksum_mode: none

Hello!

Unfortunately, this doesn't help :-(
I have the same situation as before...
Could somebody send me working config?

Thank you!

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com



-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: