Snort mailing list archives

Re: Snort and VPN


From: Bala Ayres <baayres () sbcglobal net>
Date: Mon, 16 Feb 2004 16:37:12 -0800 (PST)

Sorry i don't know which build it is. Its Snort 201
downloaded from the site - binaries for WIN 2K. 


Where would a compatible PCAP library be for WIN 2k ?

--- Matt Kettler <mkettler () evi-inc com> wrote:
At 05:47 PM 2/16/2004, Bala Ayres wrote:
Whenever i start up snort in any of the 3 modes it
seems to block any inbound traffic on port 80
(http) .
Yahoo IM seems to work but i am unable to browse. I
also have a VPN connection into work which seems to
be
affected as well (i can't read email etc.)

That's generaly impossible... a normal build of
snort _cannot_ block 
packets.. it has no ability to do so.

Are you using a flexresp enabled build of snort?
snort-inline? snortsam?

If all three are no, then you've got some other
problems.

Perhaps the pcap library you have is somehow
incompatible with your setup?








-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps
Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!

http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or
unsubscribe:

https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:

http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: