[Snort-users] Snort 2.9.0.3 & Phil Wood's modified libpcap

Russ Combs rcombs at ...1935...
Fri Feb 11 14:43:16 EST 2011


On Fri, Feb 11, 2011 at 7:18 AM, <vincent at ...15035...> wrote:

> On Fri, 11 Feb 2011, Russ Combs wrote:
>
> Hi Russ,
>
> Thanks for your answer. I will include the patch in the rpm release of
> 2.9.0.4 for EL5.
>
>
>  Should I include that patch in my .EL5 rpms anyway or keep
>>
>>> the 0.5 version with the bug?
>>>
>>
>> Sourcefire didn't because of the timing, but the patch is safe, IMHO.
>> If you do include it, use the later one with the version number
>> change.
>>
>
> What later version? I didn't notice a later version of that patch. Maybe I
> missed something...
>

Check "[Snort-users] freebsd/snort 2.9.0.3 daq: how do I verify it is using
the ram?"

I've attached here for convenience.


> Thanks for all the help,
>
> Regards,
>
> Vincent
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20110211/77f78ad5/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pcap_buffer_size_fix.patch
Type: application/octet-stream
Size: 734 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20110211/77f78ad5/attachment.obj>


More information about the Snort-users mailing list