[Snort-devel] [DAQ][PATCH 1/3] fix --enable-xyz-module options

Will Metcalf william.metcalf at ...2499...
Tue Aug 3 10:15:08 EDT 2010


We use libcap-ng in for this in a errr ummm different project, and it
works really well ;-)...

http://people.redhat.com/sgrubb/libcap-ng/

Regards,

Will

On Tue, Aug 3, 2010 at 8:57 AM, Florian Westphal <fwestphal at ...2119...> wrote:
> Russ Combs <rcombs at ...402...> wrote:
>> Thanks for submitting your patches.  We will look into incorporating any
>> changes into the next release.  I'll give you a response to each one way or
>> the other when I get a chance.
>>
>> How is the DAQ working for you?
>
> Quite nice so far, thanks for asking.
>
> One suggestion is to add a note about "-P" to the snort "nfq"
> documentation -- snort will exit on something like "ping -s 2000" if you
> use connection tracking with NFQUEUE otherwise.
>
> Another thing that i'd like to see is support for unprivileged operation (setuid
> while retaining CAP_NET_ADMIN), I tried to make this work without too
> much hackery in daq, but failed. I'll send out an RFC patch later today; maybe
> someone else has an idea how to make it work in a better fashion.
>
> ------------------------------------------------------------------------------
> The Palm PDK Hot Apps Program offers developers who use the
> Plug-In Development Kit to bring their C/C++ apps to Palm for a share
> of $1 Million in cash or HP Products. Visit us here for more details:
> http://p.sf.net/sfu/dev2dev-palm
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
>




More information about the Snort-devel mailing list