[Snort-users] Packet ordering with Snort

Sanjai Narain narain at ...13750...
Tue Jun 6 18:06:21 EDT 2006


I would like to ensure that a snort-based IDS receives packets in 
exactly the same order as a process on the same host receives or sends 
them. Since snort receives its packets from libpcap, whereas the process 
receives/sends these to/from sockets, I am not sure how to ensure this 
ordering. Any suggestions would be greatly appreciated. Thanks. -- Sanjai




More information about the Snort-users mailing list