Snort mailing list archives
Re: snort inline capability
From: Joel Esler <jesler () sourcefire com>
Date: Mon, 5 Nov 2012 08:26:37 -0500
On Nov 5, 2012, at 1:10 AM, amin Salehi <seyedamin_salehi () yahoo com> wrote:
hi. is snort with inline capability is better than fwsnort and snortsam?
It depends upon your use case. But I think that the in-line capability is the way to go.
when i want to use snort as IPS with -Q option what DAQ type is best?
That question depends upon the environment you are deploying in.
is DAQ policy is requierd in snort.conf?
No.
how can i config snort.conf?
Our documentation is available at www.snort.org/docs
------------------------------------------------------------------------------ LogMeIn Central: Instant, anywhere, Remote PC access and management. Stay in control, update software, and manage PCs from one command center Diagnose problems and improve visibility into emerging IT issues Automate, monitor and manage. Do more in less time with Central http://p.sf.net/sfu/logmein12331_d2d _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ LogMeIn Central: Instant, anywhere, Remote PC access and management. Stay in control, update software, and manage PCs from one command center Diagnose problems and improve visibility into emerging IT issues Automate, monitor and manage. Do more in less time with Central http://p.sf.net/sfu/logmein12331_d2d
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- snort inline capability amin Salehi (Nov 04)
- Re: snort inline capability Joel Esler (Nov 05)