Snort mailing list archives

Re: Snort 2.8.4 Beta - inline still not working on 64 bit have to use svn


From: Victor Julien <lists () inliniac net>
Date: Wed, 15 Oct 2008 17:21:58 +0200

In the snort-inline project we moved on to the more recent libnet 1.1,
thanks to the funding of NitroSecurity. The code is GPL, so Sourcefire
could integrate that code in Snort if they like...

An additional advantage would be that it supports IPv6 resets and icmp6
packets, although a patch to libnet 1.1 is required for the icmp6 part
(see
http://www.inliniac.net/blog/2007/10/16/libnet-11-ipv6-fixes-and-additions.html)

Regards,
Victor

Morgan Cox wrote:
hi.

Inline mode seems not possible on a 64bit system due to libnet

If I manage to compile it using the non svn snort it segfaults when
trying -Q to activate inline.  (using now kernel 2.6.27) however the
snort-inline svn works fine with same kernel...

I've tried to compile on mutiple systems - all 32bit ones work -
ubuntu, fedora, all 64bit versions segfault.

I'm pretty sure its related to the very very old version of libnet
that snort (non snv) relies on for inline mode - is this lightly to be
the case  ?

If so when is snort going to the more recent version of libnet ? The
one it uses just doesn't work in a 64bit system and is about 4 years old .

cheers

------------------------------------------------------------------------

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: