RE: Snort Inline

["Kevin Pietersma" <kev () attcanada net>]

Snort InlineHi Bob,

I'm on the verge of doing a SNORT inline implementation and am just
beginning my research.  You mentioned you'd be writing up the steps once you
were done.  Do you have any documentation that you could share?

TIA,
kev
  -----Original Message-----
  From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of Bob McDowell
  Sent: Tuesday, December 31, 2002 3:23 PM
  To: snort-users () lists sourceforge net
  Subject: [Snort-users] Snort Inline




  Has anyone on the list successfully installed/configured snort in inline
mode?  I've been wrestling with it for days, and I think I'm getting close.
My biggest gripe about it is that I can't seem to find any help with it.  It
took a lot of head scratching to get as far as I have...

  When I'm done I'll write up the steps it took me to get it snorting.  In
the mean time, can anyone out there help me?  Any documentation, tips,
warnings, etc would be greatly appreciated.

  Specifically, I'm now stuck with a message that reads 'InlineInit:  :
Failed to send netlink message:  Connection refused'

  Thanks in advance.




  Bob McDowell
  IS Specialist
  Cox HealthPlans, LLC
  417.269.2848