[Snort-users] General inline question

Bobby Venal bobby.venal at ...11827...
Wed Aug 4 12:01:26 EDT 2010


I just got snort running inline last night (-Q), and was getting some
priority 3 alerts from our netflix box.

What seemed weird was that I hadn't added any iptables rules yet to pass any
packets to QUEUE.

So my question is: does snort inline still watch packets with pcap, in
addition to anything passed to it through QUEUE?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100804/2e0da705/attachment.html>

More information about the Snort-users mailing list