Re: Snort 2.9.0.3 & Phil Wood's modified libpcap

[Edward Fjellskål <edwardfjellskaal () gmail com>]

Just for info, I patched daq-0.5 yesterday and added new release to my PPA:

http://ppa.launchpad.net/ebf0/gamelinux/ubuntu/ lucid/main daq 0.5-2ubuntu1



daq (0.5-2ubuntu1) lucid; urgency=low

  * Fixed buffer_size ignored bug

 -- Edward Fjellskål <edwardfjellskaal () gmail com>  Thu, 08 Feb 2011
19:36:00 +0000



On Wed, Feb 9, 2011 at 4:09 AM, Joel Esler <jesler () sourcefire com> wrote:
> We are going to fix this soon.  I'll post on the blog when we iron out the details.
>
> Joel
>
> On Feb 8, 2011, at 12:15 PM, Mike Lococo wrote:
>
> > Although I'll echo the warning of other folks that the buffer-size is
> > hardcoded with daq-0.5 and earlier (although the change in 0.5.1 is news
> > to me, I look forward to testing it)
>
> --
> Joel Esler
> jesler () sourcefire com
> http://blog.snort.org && http://blog.clamav.net
>
>
> ------------------------------------------------------------------------------
> The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
> Pinpoint memory and threading errors before they happen.
> Find and fix more than 250 security defects in the development cycle.
> Locate bottlenecks in serial and parallel code that limit performance.
> http://p.sf.net/sfu/intel-dev2devfeb
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-- 
Edward Bjarte Fjellskål
Senior Security Analyst
http://www.gamelinux.org/

------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users