[Snort-devel] [PATCHES] Fixes for daq_nfq

Russ Combs rcombs at ...402...
Wed Mar 23 13:38:31 EDT 2011


On Wed, Mar 23, 2011 at 1:19 PM, Kelvie Wong <kwong at ...3121...> wrote:

> On March 22, 2011 05:47:05 PM Russ Combs wrote:
> > OK - what version of pcap are you using?
> >
>
> I'm using version 1.0.0 right now; do later versions accept DLT_IPV4 as a
> layer type?
>

Don't think so.  I've bugged this.  We'll change log_tcpdump to convert back
since we need the original change to allow ip4 or ip6 decoding via nfq.

Thanks for reporting the issues.  Are the prior issues resolved?  Let me
know so we can fix 'em.  :)

Russ

>
>
> --
> Kelvie Wong
> Software Developer
>
> Wurldtech Security Technologies Inc.
> Suite 1680 - 401 West Georgia St.
> Vancouver, B.C.  V6B 5A1
> Canada
>
> Phone:       + 1.604.669.6674
> Toll Free:   + 1.877.369.6674
> Fax:         + 1.604.669.2902
> Website:    http://www.wurldtech.com/
>
> "ARE YOU ACHILLES CERTIFIED?"
>
> This message is intended only for the named recipients. This message
> may contain information that is privileged, confidential or exempt
> from disclosure under applicable law. Any dissemination or copying
> of this message by anyone other than a named recipient is strictly
> prohibited. If you are not a named recipient or an employee or agent
> responsible for delivering this message to a named recipient, please
> notify us immediately by telephone at 604-669-6674, and permanently
> destroy this message and any copies you may have. Email may not be
> secure unless properly encrypted.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20110323/a03a3e98/attachment.html>


More information about the Snort-devel mailing list