Comments on: Snort_inline: running Snort_inline 2.6.0.2 http://www.inliniac.net/blog/2006/10/05/snort_inline-running-snort_inline-2602.html Everything inline. Mon, 30 Jan 2012 16:49:09 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: VictorJ http://www.inliniac.net/blog/2006/10/05/snort_inline-running-snort_inline-2602.html/comment-page-1#comment-73 VictorJ Thu, 05 Oct 2006 17:55:39 +0000 http://www.inliniac.net/blog/?p=45#comment-73 Jason, I was going to say: read the Snort inline site, but then I remembered it is not mentioned there ;-) Ok, these are some of the points that improved over mainline Snort: - support for the new linux/netfilter queue'ing method - bait and switch preprocessor - stickydrop preprocessor - clamav preprocessor - improved stream4 for inline use - improved version of reject action - fixes for FreeBSD - removal of dependency on libnet, using libdnet instead There might be more that I can't remember right now, but I think these are the most important. Jason, I was going to say: read the Snort inline site, but then I remembered it is not mentioned there ;-)

Ok, these are some of the points that improved over mainline Snort:
- support for the new linux/netfilter queue’ing method
- bait and switch preprocessor
- stickydrop preprocessor
- clamav preprocessor
- improved stream4 for inline use
- improved version of reject action
- fixes for FreeBSD
- removal of dependency on libnet, using libdnet instead

There might be more that I can’t remember right now, but I think these are the most important.

]]> By: Jason http://www.inliniac.net/blog/2006/10/05/snort_inline-running-snort_inline-2602.html/comment-page-1#comment-72 Jason Thu, 05 Oct 2006 16:09:28 +0000 http://www.inliniac.net/blog/?p=45#comment-72 Since Snort proper has inline support, perhaps a brief list of things that differ in Snort_Inline would be beneficial to those deciding whether to use Snort proper, or Snort_Inline. Since Snort proper has inline support, perhaps a brief list of things that differ in Snort_Inline would be beneficial to those deciding whether to use Snort proper, or Snort_Inline.

]]>