[Snort-users] snort-inline vs. snort with inline ??
jason.brvenik at ...1935...
Wed May 10 14:43:19 EDT 2006
snort in inline mode ( --enable-inline ) and snort-inline are two
different projects. There is common code in that the snort-inline
project starts with the snort code and then adds things like a clamav
preprocessor. In that sense they are the same inline.
If you are looking to do classic IPS then snort proper is fine. If you
need to do anti virus or some of the other things that snort-inline adds
then it is appropriate.
Clear as mud right?
Michael W Cocke wrote:
> I'm trying to work out what the difference is between running
> snort-inline and snort compiled 'with-inline'... Is there any? Which
> is better? (I know better is subjective, but give me a clue or two).
> If you're not confused, you're not trying hard enough.
> Please note - Due to the intense volume of spam, we have installed
> site-wide spam filters at catherders.com. If email from you bounces,
> try non-HTML, non-encoded, non-attachments,
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live webcast
> and join the prime developer group breaking into this new coding territory!
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
Jason Brvenik - Sourcefire
PGP: 89C6 DE77 3B32 FC03 A5AE B5DD 11DF 4C8B 0D8E 3383
More information about the Snort-users