[Snort-users] FreeBSD, IPFilter and Snort

Andreas Brenk ab at ...2860...
Wed Sep 12 12:33:04 EDT 2001


Hi List.

I'm planning to run Snort on a FreeBSD box running IPFilter.

No my question is, will Snort (or libpcap in general) receive the
packets before they are filtered by IPFilter (i.e. all) or only the
packets that have passed IPF?

Thanks in advance
Andreas




More information about the Snort-users mailing list