Snort mailing list archives
Re: Snort 2.8.4 Beta - inline still not working on 64 bit have to use svn
From: Victor Julien <lists () inliniac net>
Date: Wed, 15 Oct 2008 17:21:58 +0200
In the snort-inline project we moved on to the more recent libnet 1.1, thanks to the funding of NitroSecurity. The code is GPL, so Sourcefire could integrate that code in Snort if they like... An additional advantage would be that it supports IPv6 resets and icmp6 packets, although a patch to libnet 1.1 is required for the icmp6 part (see http://www.inliniac.net/blog/2007/10/16/libnet-11-ipv6-fixes-and-additions.html) Regards, Victor Morgan Cox wrote:
hi. Inline mode seems not possible on a 64bit system due to libnet If I manage to compile it using the non svn snort it segfaults when trying -Q to activate inline. (using now kernel 2.6.27) however the snort-inline svn works fine with same kernel... I've tried to compile on mutiple systems - all 32bit ones work - ubuntu, fedora, all 64bit versions segfault. I'm pretty sure its related to the very very old version of libnet that snort (non snv) relies on for inline mode - is this lightly to be the case ? If so when is snort going to the more recent version of libnet ? The one it uses just doesn't work in a 64bit system and is about 4 years old . cheers ------------------------------------------------------------------------ ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ ------------------------------------------------------------------------ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort 2.8.4 Beta - inline still not working on 64 bit have to use svn Morgan Cox (Oct 15)
- Re: Snort 2.8.4 Beta - inline still not working on 64 bit have to use svn Victor Julien (Oct 15)
- Re: Snort 2.8.4 Beta - inline still not working on 64 bit have to use svn Will Metcalf (Oct 15)