[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-users
Subject:    Re: [Snort-users] Inline with PF
From:       Will Metcalf <william.metcalf () gmail ! com>
Date:       2006-01-24 4:50:00
Message-ID: c13e433a0601232050yef5d578xab538fe357f9994f () mail ! gmail ! com
[Download RAW message or body]

No, not one that we have built support for.  If you discover that PF
does in fact have userspace queueing functionality or divert sockets
available, we would be more than happy to try and add support for it. 
If you are interested, snort_inline does support IPFW for FreeBSD. 
Unfortunately that functionality is broken in the current release of
vanilla snort.  I'm also not sure if the fixes for IPFW are checked
into head yet or not.  If you just want to play around to test it out,
your best bet will be to download a snort_inline RC.  Hopefully Steve
(*Wave* hi Steve) and I will get the IPFW fixes in before the next
snort release as FreeBSD ninja Nick Rogness spent a lot of time fixing
this.

Regards,

Will

On 1/23/06, Axton <axton.grams@gmail.com> wrote:
> Does anyone know if PF (BDS) has a queue facility that snort can use?
> Similar to the QUEUE facility available in iptables.
>
> Axton Grams
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://sel.as-us.falkag.net/sel?cmdlnk&kid3432&bid#0486&dat1642
> _______________________________________________
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?listsnort-users
>


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list
[prev in list] [next in list] [prev in thread] [next in thread]