Re: Inline with PF

[Will Metcalf <william.metcalf () gmail com>]

No, not one that we have built support for.  If you discover that PF
does in fact have userspace queueing functionality or divert sockets
available, we would be more than happy to try and add support for it. 
If you are interested, snort_inline does support IPFW for FreeBSD. 
Unfortunately that functionality is broken in the current release of
vanilla snort.  I'm also not sure if the fixes for IPFW are checked
into head yet or not.  If you just want to play around to test it out,
your best bet will be to download a snort_inline RC.  Hopefully Steve
(*Wave* hi Steve) and I will get the IPFW fixes in before the next
snort release as FreeBSD ninja Nick Rogness spent a lot of time fixing
this.

Regards,

Will

On 1/23/06, Axton <axton.grams () gmail com> wrote:
> Does anyone know if PF (BDS) has a queue facility that snort can use?
> Similar to the QUEUE facility available in iptables.
>
> Axton Grams
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?listsnort-users


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users