[Snort-users] Snort-users Digest, Vol 1, Issue 4

Jim Campbell jim at w4bqp.net
Sun Jun 18 15:29:08 EDT 2017


When you configure Snort to operate in Inline mode, packets that cause 
an alert are also dropped. The two documents that best describe this are:
http://sublimerobots.com/2016/02/snort-ips-inline-mode-on-ubuntu/
https://s3.amazonaws.com/snort-org-site/production/document_files/files/000/000/013/original/Snort_IPS_using_DAQ_AFPacket.pdf
The information in both are needed.

On 6/17/2017 9:52 PM, tantioification . wrote:
> Hi Jim,
>
> Could you tell me how to drop any packet that alerted automatically 
> with pulledpork?
> in your last post you seem to be successful..
> would you sharing to me?
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20170618/5c893049/attachment.html>


More information about the Snort-users mailing list