[Snort-users] Snort and nf_queue

Will Metcalf william.metcalf at ...11827...
Thu Jul 26 08:24:26 EDT 2007

snort_inline supports nf_queue. See the README.NFQUEUE in the source.




On 7/26/07, bahamin takhtaei <b_takhtaei at ...131...> wrote:
> Hi everyone!
> I run Snort- in IDS mode and see that it works with nf_queue
> correctly.
> But when I search in the src-code, I can't find any function that handles
> the nf_queue packets.
> Also, I send the receiving packets to several nf_queue and see that Snort
> handles
> all of them! where is it identifies the queue_nums and works with them?
> Thank you,
> Bahamin
> ------------------------------
> Take the Internet to Go: Yahoo!Go puts the Internet in your pocket:<http://us.rd.yahoo.com/evt=48253/*http://mobile.yahoo.com/go?refer=1GNXIC>mail, news, photos & more.
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20070726/6f48252a/attachment.html>

More information about the Snort-users mailing list