[Snort-users] Snort Inline mode!!
dustypath at ...5068...
Tue Nov 15 09:43:35 EST 2011
On 11/14/11 11:03 PM, Pratik Kumawat wrote:
> How to compile snort for it to be able to run in inline mode?? I tried
> using "--enable-inline" while doing ./configure but it says "Warning:
> Unrecognized option --enable-inline".. and if I do ./configure without
> this, everything goes fine, then make and make install also goes well
> but while starting snort, if I use -Q (for inline mode), it gives a
> fatal error, "pcap daq not support inline" and quits... Pls someone
> tell me how to do it..
Please refer to this thread:
[Snort-users] Question for the Guru's
Inline mode is handled by daq and works with af-packet and nfq at the
least. The thread has more info.
More information about the Snort-users