[Snort-users] afpacket vs. NFQ

Jason Wallace jason.r.wallace at ...11827...
Tue Oct 12 09:58:29 EDT 2010


If snort using the afpacket DAQ can be deployed inline, why is there a
NFQ DAQ? What does NFQ give you that afpacket does not? If you can run
inline with out having to involve iptables wouldn't this make for a
simpler deployment?

thx,
Wally




More information about the Snort-users mailing list