[Snort-users] snort_inline problem

Will Metcalf william.metcalf at ...11827...
Tue Sep 27 12:50:31 EDT 2005

If you are compiling your kernel with CONFIG_IP_NF_QUEUE=y instead of
=m you shouldn't have to insmod or modprobe anything.  What do you get
if you issue the following command?

cat /proc/net/ip_queue



On 9/26/05, afshin lamei <afshinlamei at ...11827...> wrote:
> Dear all,
> I'm trying to run snort inline on a 2.4.29 kernel. I've successfully
> compiled both snort (inline enabled) and the kernel 2.4.29.
> when I run the " snort -Q -c /etc/snort.conf" , I get this:
> InintInline: : Failed to send netlink message: Connection refused
> I have enabled "Config_IP_NF_QUEUE" (not as a module) , and the " insmod
> ip_queue" returns:
> "/lib/modules/2.4.29/kernel/net/ipv4/netfilter/ip_queue.o:
> couldn't find the kernel version the module was compiled for" .
>  please help me
>  regards
>  afshin

More information about the Snort-users mailing list