[Snort-devel] [PATCHES] Fixes for daq_nfq

Kelvie Wong kwong at ...3121...
Wed Mar 23 13:41:03 EDT 2011


On March 23, 2011 10:38:31 AM Russ Combs wrote:
> On Wed, Mar 23, 2011 at 1:19 PM, Kelvie Wong <kwong at ...3121...> wrote:
> 
> On March 22, 2011 05:47:05 PM Russ Combs wrote:
>  > OK - what version of pcap are you using?
> 
> I'm using version 1.0.0 right now; do later versions accept DLT_IPV4 as a
>  layer type?
> 
> Don't think so.  I've bugged this.  We'll change log_tcpdump to convert
> back since we need the original change to allow ip4 or ip6 decoding via
> nfq.
> 
> Thanks for reporting the issues.  Are the prior issues resolved?  Let me
> know so we can fix 'em.  :)
> 
> Russ

I'll let you know when we do stress testing again, unfortunately, I don't have 
the right test setup right now...

Sorry 'bout that.

-- 
Kelvie Wong
Software Developer

Wurldtech Security Technologies Inc.
Suite 1680 - 401 West Georgia St.
Vancouver, B.C.  V6B 5A1
Canada

Phone:       + 1.604.669.6674
Toll Free:   + 1.877.369.6674
Fax:         + 1.604.669.2902
Website:    http://www.wurldtech.com/

"ARE YOU ACHILLES CERTIFIED?"

This message is intended only for the named recipients. This message
may contain information that is privileged, confidential or exempt
from disclosure under applicable law. Any dissemination or copying
of this message by anyone other than a named recipient is strictly
prohibited. If you are not a named recipient or an employee or agent
responsible for delivering this message to a named recipient, please
notify us immediately by telephone at 604-669-6674, and permanently
destroy this message and any copies you may have. Email may not be
secure unless properly encrypted.




More information about the Snort-devel mailing list