[Snort-users] General inline question
bobby.venal at ...11827...
Wed Aug 4 12:01:26 EDT 2010
I just got snort running inline last night (-Q), and was getting some
priority 3 alerts from our netflix box.
What seemed weird was that I hadn't added any iptables rules yet to pass any
packets to QUEUE.
So my question is: does snort inline still watch packets with pcap, in
addition to anything passed to it through QUEUE?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users