Re: Snort Inline mode!!

[NA <dustypath () comcast net>]

So, is daq installed or not? It is a dependency so you'll get nothing
but errors until you install it. For better help from these forums
please state your distro and the versions of Snort, Daq, etc you are
using. Check the README's in the source for better understanding of the
requirements.
Hope this helps.
-Bill


On 11/16/11 12:29 AM, Pratik Kumawat wrote:
> I tried with af-packet but it gives error.. and daq-nfq is not
> installed so can u pls tell me how to do it?? On installing daq it shows
>
> Build NFQ DAQ module....... : no
>
>
>
> Quoting NA <dustypath () comcast net>:
>
> > On 11/14/11 11:03 PM, Pratik Kumawat wrote:
> > > How to compile snort for it to be able to run in inline mode?? I tried
> > > using "--enable-inline" while doing ./configure but it says "Warning:
> > > Unrecognized option --enable-inline".. and if I do ./configure without
> > > this, everything goes fine, then make and make install also goes well
> > > but while starting snort, if I use -Q (for inline mode), it gives a
> > > fatal error, "pcap daq not support inline" and quits... Pls someone
> > > tell me how to do it..
> > Please refer to this thread:
> >  [Snort-users] Question for the Guru's
> >
> > Inline mode is handled by daq and works with af-packet and nfq at the
> > least. The thread has more info.
> >
> > -Bill
> >
> > ------------------------------------------------------------------------------
> >
> > RSA(R) Conference 2012
> > Save $700 by Nov 18
> > Register now
> > http://p.sf.net/sfu/rsa-sfdev2dev1
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest
> >  Snort news!


------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!