Snort mailing list archives
Re: 2.3RC2, inline, faq?
From: slesru <slesru () yahoo com>
Date: Tue, 4 Jan 2005 22:07:49 -0800 (PST)
--- Will Metcalf <william.metcalf () gmail com> wrote:
Did you apply iptables p-o-m to your kernel sources? The problem is snort reading packets from ip_queue in the IpqLoop in inline.c, not something that can be fixed with changes to your snort_inline.conf.... cat /proc/net/ip_queue and send us back your results......
Hello! I didn't applied any patches to kernel (as I wrote this is kernel from Suse, not from kernel.org, I'll test another kernel..) Here is my ip_queue (when snort is started) Peer PID : 4068 Copy mode : 2 Copy range : 65535 Queue length : 1 Queue max. length : 1024 __________________________________ Do you Yahoo!? Yahoo! Mail - 250MB free storage. Do more. Manage less. http://info.mail.yahoo.com/mail_250 ------------------------------------------------------- The SF.Net email is sponsored by: Beat the post-holiday blues Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek. It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- 2.3RC2, inline, faq? slesru (Jan 03)
- Re: 2.3RC2, inline, faq? Will Metcalf (Jan 03)
- Re: 2.3RC2, inline, faq? slesru (Jan 03)
- Re: 2.3RC2, inline, faq? Will Metcalf (Jan 03)
- Re: 2.3RC2, inline, faq? slesru (Jan 03)
- Re: 2.3RC2, inline, faq? Will Metcalf (Jan 04)
- Re: 2.3RC2, inline, faq? slesru (Jan 04)
- Re: 2.3RC2, inline, faq? Will Metcalf (Jan 04)
- Re: 2.3RC2, inline, faq? slesru (Jan 04)
- Re: 2.3RC2, inline, faq? slesru (Jan 04)
- Re: 2.3RC2, inline, faq? slesru (Jan 06)
- Re: 2.3RC2, inline, faq? slesru (Jan 03)
- Re: 2.3RC2, inline, faq? Will Metcalf (Jan 03)