Snort mailing list archives
Re: Snort-users Digest, Vol 1, Issue 4
From: Jim Campbell <jim () w4bqp net>
Date: Sun, 18 Jun 2017 15:29:08 -0400
When you configure Snort to operate in Inline mode, packets that cause an alert are also dropped. The two documents that best describe this are:
http://sublimerobots.com/2016/02/snort-ips-inline-mode-on-ubuntu/ https://s3.amazonaws.com/snort-org-site/production/document_files/files/000/000/013/original/Snort_IPS_using_DAQ_AFPacket.pdf The information in both are needed. On 6/17/2017 9:52 PM, tantioification . wrote:
Hi Jim,Could you tell me how to drop any packet that alerted automatically with pulledpork?in your last post you seem to be successful.. would you sharing to me?
_______________________________________________ Snort-users mailing list Snort-users () lists snort org Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Re: Snort-users Digest, Vol 1, Issue 4 Andhika Arya via Snort-users (Jun 15)
- <Possible follow-ups>
- Re: Snort-users Digest, Vol 1, Issue 4 tantioification . via Snort-users (Jun 17)
- Re: Snort-users Digest, Vol 1, Issue 4 Jim Campbell (Jun 18)
- Re: Snort-users Digest, Vol 1, Issue 4 Marcin Dulak via Snort-users (Jun 18)
- Re: Snort-users Digest, Vol 1, Issue 4 Jim Campbell (Jun 18)