[Snort-users] daq inline and ipfw does not support ipv6?

Michael Scheidell michael.scheidell at ...8144...
Fri Feb 4 10:31:42 EST 2011

being as the last /8 ipv4 block has been assigned, I think it might be 
time to make sure everything worked with ipv6, so we can fix it if it 

I noticed on snort manual section 1.5.6, IPFW that it seems to indicate 
that the ipfw module does not support ipv6.  Is this something *BSD 
needs to fix? or snort?

IPFW is available for BSD systems. It replaces the inline version 
available in pre-2.9 versions built with this:
     ./configure --enable-ipfw / -DGIDS -DIPFW
This command line argument is no longer supported:
     ./snort -J <port#>
Instead, start Snort like this:
     ./snort --daq ipfw [--daq-var port=<port>]
<port> ::= 1..65535; default is 8000
* IPFW only supports ip4 traffic.

platform is freebsd 7.3, amd64, but I am not sure that affects the manual.

Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
 >*| *SECNAP Network Security Corporation

    * Certified SNORT Integrator
    * 2008-9 Hot Company Award Winner, World Executive Alliance
    * Five-Star Partner Program 2009, VARBusiness
    * Best in Email Security,2010: Network Products Guide
    * King of Spam Filters, SC Magazine 2008

This email has been scanned and certified safe by SpammerTrap(r). 
For Information please see http://www.secnap.com/products/spammertrap/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20110204/eb045134/attachment.html>

More information about the Snort-users mailing list