Snort mailing list archives

Re: [PATCHES] Fixes for daq_nfq


From: Russ Combs <rcombs () sourcefire com>
Date: Tue, 29 Mar 2011 12:38:50 -0400

On Wed, Mar 23, 2011 at 1:41 PM, Kelvie Wong <kwong () wurldtech com> wrote:

On March 23, 2011 10:38:31 AM Russ Combs wrote:
On Wed, Mar 23, 2011 at 1:19 PM, Kelvie Wong <kwong () wurldtech com>
wrote:

On March 22, 2011 05:47:05 PM Russ Combs wrote:
 > OK - what version of pcap are you using?

I'm using version 1.0.0 right now; do later versions accept DLT_IPV4 as a
 layer type?


Looks like 1.1.1 does accept DLT_IPV4.


Don't think so.  I've bugged this.  We'll change log_tcpdump to convert
back since we need the original change to allow ip4 or ip6 decoding via
nfq.

Thanks for reporting the issues.  Are the prior issues resolved?  Let me
know so we can fix 'em.  :)

Russ

I'll let you know when we do stress testing again, unfortunately, I don't
have
the right test setup right now...

Sorry 'bout that.

--
Kelvie Wong
Software Developer

Wurldtech Security Technologies Inc.
Suite 1680 - 401 West Georgia St.
Vancouver, B.C.  V6B 5A1
Canada

Phone:       + 1.604.669.6674
Toll Free:   + 1.877.369.6674
Fax:         + 1.604.669.2902
Website:    http://www.wurldtech.com/

"ARE YOU ACHILLES CERTIFIED?"

This message is intended only for the named recipients. This message
may contain information that is privileged, confidential or exempt
from disclosure under applicable law. Any dissemination or copying
of this message by anyone other than a named recipient is strictly
prohibited. If you are not a named recipient or an employee or agent
responsible for delivering this message to a named recipient, please
notify us immediately by telephone at 604-669-6674, and permanently
destroy this message and any copies you may have. Email may not be
secure unless properly encrypted.

------------------------------------------------------------------------------
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software 
be a part of the solution? Download the Intel(R) Manageability Checker 
today! http://p.sf.net/sfu/intel-dev2devmar
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Current thread: