Snort mailing list archives

Re: How to use DAQ inline mode in Snort3?


From: Russ <rucombs () cisco com>
Date: Mon, 5 Sep 2016 23:05:44 -0400

You can use -Q for inline mode.  Otherwise it is passive.

On 9/4/16 10:42 PM, 卓 维翰 wrote:

I have writen a new daq module and I want to test it’s performance. But when I try to use |-daq-mode inline| option to do a test, It shows me that
|ERROR: unknown option --daq-mode inline|
I read the default_snort_manual.html and it said that this option has been removed in snort3. So I want to know how to use this daq mode or some other mode that just receive packets.
Can anyone help me ? Thanks very much!



------------------------------------------------------------------------------


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: