[Snort-users] why old libnet?

Joshua Berry jberry at ...11848...
Mon Mar 28 12:35:47 EST 2005

Probably because it has support for using reject as well as drop, alert
and log.  The reject keyword allows you to reset the connection rather
than just drop it.

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Matt
Sent: Monday, March 28, 2005 2:31 PM
To: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] why old libnet?

Florin Andrei wrote:

>My thoughts exactly, but it looks like libnet is also required by --
>If i don't put in --enable-inline, it does not require libnet. If i do
>put it in, it requires libnet.

That strikes me as odd.. I knew --enable-inline required libipq, but I
did not realize it required libnet.. That seems odd to me.

SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list