[Snort-devel] [PATCHES] Fixes for daq_nfq

Russ Combs rcombs at ...402...
Mon Apr 11 12:00:00 EDT 2011


I've fixed the timestamp issue for NFQ / IPQ but need more info re the other
error.

Do you have the log messages that start with "nfq_daq_acquire: select = "?
Those are output when select() returns -1 (error).  Other than EINTR, none
of the errno values on the select man page are recoverable (EBADF, EINVAL,
ENOMEM).  Except maybe ENOMEM.

On Tue, Mar 29, 2011 at 3:27 PM, Kelvie Wong <kwong at ...3121...> wrote:

> On March 29, 2011 09:38:50 AM Russ Combs wrote:
> > Looks like 1.1.1 does accept DLT_IPV4.
>
> Interesting.  I'll try upgrading then.
>
> Thanks for letting me know.
> --
> Kelvie Wong
> Software Developer
>
> Wurldtech Security Technologies Inc.
> Suite 1680 - 401 West Georgia St.
> Vancouver, B.C.  V6B 5A1
> Canada
>
> Phone:       + 1.604.669.6674
> Toll Free:   + 1.877.369.6674
> Fax:         + 1.604.669.2902
> Website:    http://www.wurldtech.com/
>
> "ARE YOU ACHILLES CERTIFIED?"
>
> This message is intended only for the named recipients. This message
> may contain information that is privileged, confidential or exempt
> from disclosure under applicable law. Any dissemination or copying
> of this message by anyone other than a named recipient is strictly
> prohibited. If you are not a named recipient or an employee or agent
> responsible for delivering this message to a named recipient, please
> notify us immediately by telephone at 604-669-6674, and permanently
> destroy this message and any copies you may have. Email may not be
> secure unless properly encrypted.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20110411/fa97b451/attachment.html>


More information about the Snort-devel mailing list