[Snort-devel] Question about DAQ in snort 3.0

Xiao Jun xiaojuntime at ...2499...
Fri Jul 4 05:12:53 EDT 2008


Hi All,

I am wondering the snort 3.0 beta + iptables (IPS mode) workable or not,
that means how did the engine return back the detection result (for
example, drop or reject) back to data source?

BTW, at line 147 of daq_ipq.c, "dd.resolution" should be used to
return the detection result, but I even can not find out the
definition for resolution.

Thanks,
Jun




More information about the Snort-devel mailing list