Snort mailing list archives
Re: General inline question
From: Russ Combs <rcombs () sourcefire com>
Date: Wed, 4 Aug 2010 12:33:17 -0400
Please send your Snort version and the command line you are using. Thanks Russ On Wed, Aug 4, 2010 at 12:01 PM, Bobby Venal <bobby.venal () gmail com> wrote:
Hello, I just got snort running inline last night (-Q), and was getting some priority 3 alerts from our netflix box. What seemed weird was that I hadn't added any iptables rules yet to pass any packets to QUEUE. So my question is: does snort inline still watch packets with pcap, in addition to anything passed to it through QUEUE? ------------------------------------------------------------------------------ The Palm PDK Hot Apps Program offers developers who use the Plug-In Development Kit to bring their C/C++ apps to Palm for a share of $1 Million in cash or HP Products. Visit us here for more details: http://p.sf.net/sfu/dev2dev-palm _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------ The Palm PDK Hot Apps Program offers developers who use the Plug-In Development Kit to bring their C/C++ apps to Palm for a share of $1 Million in cash or HP Products. Visit us here for more details: http://p.sf.net/sfu/dev2dev-palm
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- General inline question Bobby Venal (Aug 04)
- Re: General inline question Russ Combs (Aug 04)