Comments on: New Snortsam patch for Snort 2.8.0.1 http://www.inliniac.net/blog/2008/01/08/new-snortsam-patch-for-snort-2801.html Everything inline. Mon, 30 Jan 2012 16:49:09 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Victor Julien http://www.inliniac.net/blog/2008/01/08/new-snortsam-patch-for-snort-2801.html/comment-page-1#comment-10653 Victor Julien Tue, 08 Jan 2008 16:50:11 +0000 http://www.inliniac.net/blog/2008/01/08/new-snortsam-patch-for-snort-2801.html#comment-10653 Snort_inline on FreeBSD uses IPFW's divert sockets. The problem is that divert sockets don't work on a FreeBSD bridge. But I'm not a *BSD expert (or even user) so I could have missed other options or recent changes to FreeBSD. Snort_inline on FreeBSD uses IPFW’s divert sockets. The problem is that divert sockets don’t work on a FreeBSD bridge. But I’m not a *BSD expert (or even user) so I could have missed other options or recent changes to FreeBSD.

]]> By: Jared Evans http://www.inliniac.net/blog/2008/01/08/new-snortsam-patch-for-snort-2801.html/comment-page-1#comment-10652 Jared Evans Tue, 08 Jan 2008 16:08:24 +0000 http://www.inliniac.net/blog/2008/01/08/new-snortsam-patch-for-snort-2801.html#comment-10652 Hi, Richard Bejtlich from http://taosecurity.blogspot.com recommended that I ask this question at this blog. I wasn't sure where the best place was to post my question so I'm asking via the comments: Do you know of any recent updates about running Snort_inline on a FreeBSD bridge? It's my understanding that FreeBSD as it currently stands isn't capable of sending packets to Snort_inline when the machine is configured as a bridge. Thanks! Hi,

Richard Bejtlich from http://taosecurity.blogspot.com recommended that I ask this question at this blog. I wasn’t sure where the best place was to post my question so I’m asking via the comments:

Do you know of any recent updates about running Snort_inline on a FreeBSD bridge? It’s my understanding that FreeBSD as it currently stands isn’t capable of sending packets to Snort_inline when the machine is configured as a bridge.

Thanks!

]]>