[Snort-devel] [PATCHES] Fixes for daq_nfq
rcombs at ...402...
Tue Mar 29 12:38:50 EDT 2011
On Wed, Mar 23, 2011 at 1:41 PM, Kelvie Wong <kwong at ...3121...> wrote:
> On March 23, 2011 10:38:31 AM Russ Combs wrote:
> > On Wed, Mar 23, 2011 at 1:19 PM, Kelvie Wong <kwong at ...3121...>
> > On March 22, 2011 05:47:05 PM Russ Combs wrote:
> > > OK - what version of pcap are you using?
> > I'm using version 1.0.0 right now; do later versions accept DLT_IPV4 as a
> > layer type?
Looks like 1.1.1 does accept DLT_IPV4.
> > Don't think so. I've bugged this. We'll change log_tcpdump to convert
> > back since we need the original change to allow ip4 or ip6 decoding via
> > nfq.
> > Thanks for reporting the issues. Are the prior issues resolved? Let me
> > know so we can fix 'em. :)
> > Russ
> I'll let you know when we do stress testing again, unfortunately, I don't
> the right test setup right now...
> Sorry 'bout that.
> Kelvie Wong
> Software Developer
> Wurldtech Security Technologies Inc.
> Suite 1680 - 401 West Georgia St.
> Vancouver, B.C. V6B 5A1
> Phone: + 1.604.669.6674
> Toll Free: + 1.877.369.6674
> Fax: + 1.604.669.2902
> Website: http://www.wurldtech.com/
> "ARE YOU ACHILLES CERTIFIED?"
> This message is intended only for the named recipients. This message
> may contain information that is privileged, confidential or exempt
> from disclosure under applicable law. Any dissemination or copying
> of this message by anyone other than a named recipient is strictly
> prohibited. If you are not a named recipient or an employee or agent
> responsible for delivering this message to a named recipient, please
> notify us immediately by telephone at 604-669-6674, and permanently
> destroy this message and any copies you may have. Email may not be
> secure unless properly encrypted.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-devel