[Snort-users] in-line mode question

Y M snort at ...15979...
Fri Aug 22 16:36:23 EDT 2014

It depends in the daq mode used. afpacket does not require any routing on the sensor itself. daq nfq will require some changes to the iptables.

There are documents that explain both on Snort's website under the Documents section that cab help.

From: Richard Smollett<mailto:yawningdogge at ...11827...>
Sent: ‎8/‎22/‎2014 11:28 PM
To: snort-users at lists.sourceforge.net<mailto:snort-users at ...3783...net>
Subject: [Snort-users] in-line mode question

So when I start Snort in in-line mode, does it automatically set up
routing? Or is that something I have to do beforehand?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140822/5141b2b6/attachment.html>
-------------- next part --------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
-------------- next part --------------
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort news!

More information about the Snort-users mailing list