Snort mailing list archives
Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0
From: Russ Combs <rcombs () sourcefire com>
Date: Fri, 28 Jan 2011 13:47:15 -0500
On Fri, Jan 28, 2011 at 1:25 PM, NA <dustypath () comcast net> wrote:
If I wish to install/configure Snort on a Mac laptop then I would configure with enable-inline and and enable-ipfw?
--enable-inline is gone. It is no longer necessary with Snort 290 and DAQ to custom build for inline mode. Also, --enable-inline was a Snort configure option. --enable-ipfw is a DAQ configure option.
Any comments on the legalities in a cafe environment and how to configure Snort to avoid crossing the line would be appreciated. Thanks, Bill Barr -------------I believe he asked for a solution. The solution is to configure Snort to work inline, ./configure --enable-inline has been around for years. You'll also need to take a look in the README that comes with the DAQ tarball to use the appropriate configure options for inline use, so for FreeBSD with ipfw for example you'll need to do ./configure --enable-ipfw and then start Snort with ./snort --daq ipfw (whatever else you want in here). The instructions in the README are pretty comprehensive. -- Nigel Houghton Head Mentalist SF VRT Department of Intelligence Excellence http://vrt-blog.snort.org/&& http://labs.snort.org/------------------------------------------------------------------------------Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even betterprice-free!Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users------------------------------------------------------------------------------ Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even better price-free! Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------ Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even better price-free! Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0, (continued)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Michael Scheidell (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Joel Esler (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Michael Scheidell (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Joel Esler (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Will Metcalf (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Crusty Saint (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Joel Esler (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Matthew Jonkman (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Nigel Houghton (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 NA (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Russ Combs (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 waldo kitty (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Frank Knobbe (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Jeff Kell (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Castle, Shane (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Matthew Jonkman (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Will Metcalf (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Michael Scheidell (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 waldo kitty (Jan 28)
- Re: SnortSam Discussion was: RulePack update and End of Life of 2.8.6.0 Michael Scheidell (Jan 28)
- Re: [Snort-sigs] RulePack update and End of Life of 2.8.6.0 Castle, Shane (Jan 06)