[Snort-devel] [PATCHES] Fixes for daq_nfq

Russ Combs rcombs at ...402...
Tue Mar 29 12:38:50 EDT 2011


On Wed, Mar 23, 2011 at 1:41 PM, Kelvie Wong <kwong at ...3121...> wrote:

> On March 23, 2011 10:38:31 AM Russ Combs wrote:
> > On Wed, Mar 23, 2011 at 1:19 PM, Kelvie Wong <kwong at ...3121...>
> wrote:
> >
> > On March 22, 2011 05:47:05 PM Russ Combs wrote:
> >  > OK - what version of pcap are you using?
> >
> > I'm using version 1.0.0 right now; do later versions accept DLT_IPV4 as a
> >  layer type?
>

Looks like 1.1.1 does accept DLT_IPV4.

> >
> > Don't think so.  I've bugged this.  We'll change log_tcpdump to convert
> > back since we need the original change to allow ip4 or ip6 decoding via
> > nfq.
> >
> > Thanks for reporting the issues.  Are the prior issues resolved?  Let me
> > know so we can fix 'em.  :)
> >
> > Russ
>
> I'll let you know when we do stress testing again, unfortunately, I don't
> have
> the right test setup right now...
>
> Sorry 'bout that.
>
> --
> Kelvie Wong
> Software Developer
>
> Wurldtech Security Technologies Inc.
> Suite 1680 - 401 West Georgia St.
> Vancouver, B.C.  V6B 5A1
> Canada
>
> Phone:       + 1.604.669.6674
> Toll Free:   + 1.877.369.6674
> Fax:         + 1.604.669.2902
> Website:    http://www.wurldtech.com/
>
> "ARE YOU ACHILLES CERTIFIED?"
>
> This message is intended only for the named recipients. This message
> may contain information that is privileged, confidential or exempt
> from disclosure under applicable law. Any dissemination or copying
> of this message by anyone other than a named recipient is strictly
> prohibited. If you are not a named recipient or an employee or agent
> responsible for delivering this message to a named recipient, please
> notify us immediately by telephone at 604-669-6674, and permanently
> destroy this message and any copies you may have. Email may not be
> secure unless properly encrypted.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20110329/3b3d59b2/attachment.html>


More information about the Snort-devel mailing list