[Snort-users] Snort 2.9.7 is now available

Michael Altizer mialtize at ...589...
Tue Nov 11 13:43:43 EST 2014


On 10/23/2014 01:30 PM, Snort Releases wrote:
> A new DAQ build is also available that updates support for a few
> operating systems.

Also included in LibDAQ 2.0.4 is a new DAQ module supporting the netmap 
high speed packet I/O framework.

Netmap is supported natively on FreeBSD 10.0 and via a combination of 
patched and additional kernel modules on Linux.  See the LibDAQ README's 
netmap section for information on setting up and running on FreeBSD or 
Linux.  This module is still somewhat experimental and additional user 
testing would be appreciated.  The passive and especially the inline 
speeds have been quite impressive compared to previously available 
options like AFPacket.  As an additional note of caution for those 
unfamiliar with netmap, using netmap will, by design, completely take 
over the target interfaces and they will not be usable for anything else 
while in that mode.

See http://info.iet.unipi.it/~luigi/netmap/ for more details on netmap 
itself.




More information about the Snort-users mailing list