snort IPS

[QuasWexExort via Snort-users <snort-users () lists snort org>]

 try to run snort in inline mode with daq afpacket. Im using mininet as
network simulator which has 4 host on it. When i add command to listen on
interface Switch1-eth2:Switch1-eth4, the ping between h4 to h2 should be
block. but why the ping still pass. some of them get block by the rules,
but some of them still pass to destination. and i got (DUP!) when i pinging
each other. why? any ideas?

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!