<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>

<channel>
	<title>Inliniac</title>
	<atom:link href="http://www.inliniac.net/blog/feed" rel="self" type="application/rss+xml" />
	<link>http://www.inliniac.net/blog</link>
	<description>Everything inline.</description>
	<pubDate>Wed, 18 Jun 2008 07:41:48 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
	<language>en</language>
			<item>
		<title>Snort_inline updated to 2.8.2.1 in SVN</title>
		<link>http://www.inliniac.net/blog/2008/06/18/snort_inline-updated-to-2821-in-svn.html</link>
		<comments>http://www.inliniac.net/blog/2008/06/18/snort_inline-updated-to-2821-in-svn.html#comments</comments>
		<pubDate>Wed, 18 Jun 2008 07:41:48 +0000</pubDate>
		<dc:creator>Victor Julien</dc:creator>
		
		<category><![CDATA[Snort]]></category>

		<category><![CDATA[Snort_inline]]></category>

		<guid isPermaLink="false">http://www.inliniac.net/blog/?p=126</guid>
		<description><![CDATA[This morning I updated our Snort_inline codebase with SourceFire&#8217;s just released 2.8.2.1 version. See the original changelogs here: 2.8.1, 2.8.2, 2.8.2.1.
Also Richard Bejtlich and Nr have good posts about the improvements of the last versions. See Richards post about a fixed frag3 vulnerability here and see Nr&#8217;s post here.
Please note that our SVN code has [...]]]></description>
		<wfw:commentRss>http://www.inliniac.net/blog/2008/06/18/snort_inline-updated-to-2821-in-svn.html/feed</wfw:commentRss>
		</item>
		<item>
		<title>Snort_inline 2.8.2.rc1 in SVN</title>
		<link>http://www.inliniac.net/blog/2008/05/10/snort_inline-282rc1-in-svn.html</link>
		<comments>http://www.inliniac.net/blog/2008/05/10/snort_inline-282rc1-in-svn.html#comments</comments>
		<pubDate>Sat, 10 May 2008 18:24:06 +0000</pubDate>
		<dc:creator>Victor Julien</dc:creator>
		
		<category><![CDATA[Snort_inline]]></category>

		<guid isPermaLink="false">http://www.inliniac.net/blog/2008/05/10/snort_inline-282rc1-in-svn.html</guid>
		<description><![CDATA[Today I&#8217;ve spent some time on updating the Snort_inline source to the latest 2.8.2.rc1. The updating went quite smooth, so I hope no big issues pop up. Like before, trying out this code can be done by checking out SVN like this:
svn co https://snort-inline.svn.sourceforge.net/svnroot/snort-inline/trunk
This will save the source to the directory &#8216;trunk&#8217;. In the directory [...]]]></description>
		<wfw:commentRss>http://www.inliniac.net/blog/2008/05/10/snort_inline-282rc1-in-svn.html/feed</wfw:commentRss>
		</item>
		<item>
		<title>Update to Modsec2sguil</title>
		<link>http://www.inliniac.net/blog/2008/03/26/update-to-modsec2sguil.html</link>
		<comments>http://www.inliniac.net/blog/2008/03/26/update-to-modsec2sguil.html#comments</comments>
		<pubDate>Wed, 26 Mar 2008 12:57:13 +0000</pubDate>
		<dc:creator>Victor Julien</dc:creator>
		
		<category><![CDATA[ModSecurity]]></category>

		<category><![CDATA[Modsec2sguil]]></category>

		<category><![CDATA[Sguil]]></category>

		<guid isPermaLink="false">http://www.inliniac.net/blog/2008/03/26/update-to-modsec2sguil.html</guid>
		<description><![CDATA[Yesterday the much anticipated Sguil 0.7.0 final was released, as was announced here. I&#8217;ve updated Modsec2sguil to support it. Next to this Ryan Cummings sent me a patch for supporting ModSecurity 2.5. So that is included as well. I haven&#8217;t given it much testing yet, but works on my boxes.
Get the new release here: http://www.inliniac.net/modsec2sguil/
Thank [...]]]></description>
		<wfw:commentRss>http://www.inliniac.net/blog/2008/03/26/update-to-modsec2sguil.html/feed</wfw:commentRss>
		</item>
		<item>
		<title>Snort_inline 2.8 status</title>
		<link>http://www.inliniac.net/blog/2008/02/26/snort_inline-28-status.html</link>
		<comments>http://www.inliniac.net/blog/2008/02/26/snort_inline-28-status.html#comments</comments>
		<pubDate>Tue, 26 Feb 2008 17:12:15 +0000</pubDate>
		<dc:creator>Victor Julien</dc:creator>
		
		<category><![CDATA[Snort]]></category>

		<category><![CDATA[Snort_inline]]></category>

		<category><![CDATA[stickydrop]]></category>

		<guid isPermaLink="false">http://www.inliniac.net/blog/2008/02/26/snort_inline-28-status.html</guid>
		<description><![CDATA[A while ago I wrote about porting Snort_inline to 2.8.0.1. That worked well, however we are still trying to resolve some issues. Especially in stickydrop, that is just broken right now. Also, SourceFire released 2.8.0.2 last week, so we need to update to that too.
First however, I will be traveling to California this week. I [...]]]></description>
		<wfw:commentRss>http://www.inliniac.net/blog/2008/02/26/snort_inline-28-status.html/feed</wfw:commentRss>
		</item>
		<item>
		<title>Improving Snort_inline&#8217;s NFQ performance</title>
		<link>http://www.inliniac.net/blog/2008/01/23/improving-snort_inlines-nfq-performance.html</link>
		<comments>http://www.inliniac.net/blog/2008/01/23/improving-snort_inlines-nfq-performance.html#comments</comments>
		<pubDate>Wed, 23 Jan 2008 15:27:29 +0000</pubDate>
		<dc:creator>Victor Julien</dc:creator>
		
		<category><![CDATA[Snort_inline]]></category>

		<category><![CDATA[TCP]]></category>

		<category><![CDATA[nfqueue]]></category>

		<category><![CDATA[sysctl]]></category>

		<guid isPermaLink="false">http://www.inliniac.net/blog/2008/01/23/improving-snort_inlines-nfq-performance.html</guid>
		<description><![CDATA[When using Snort_inline with NFQ support, it&#8217;s likely that at some point you&#8217;ve seen messages like these on the console: packet recv contents failure: No buffer space available. When the messages are appearing Snort_inline slows down significantly. I&#8217;ve been trying to find out why.
There are a number of setting that influence NFQ performance. One of [...]]]></description>
		<wfw:commentRss>http://www.inliniac.net/blog/2008/01/23/improving-snort_inlines-nfq-performance.html/feed</wfw:commentRss>
		</item>
		<item>
		<title>New security weblog by Ivan Ristic</title>
		<link>http://www.inliniac.net/blog/2008/01/22/new-security-weblog-by-ivan-ristic.html</link>
		<comments>http://www.inliniac.net/blog/2008/01/22/new-security-weblog-by-ivan-ristic.html#comments</comments>
		<pubDate>Tue, 22 Jan 2008 11:40:04 +0000</pubDate>
		<dc:creator>Victor Julien</dc:creator>
		
		<category><![CDATA[ModSecurity]]></category>

		<category><![CDATA[Ivan Ristic]]></category>

		<guid isPermaLink="false">http://www.inliniac.net/blog/2008/01/22/new-security-weblog-by-ivan-ristic.html</guid>
		<description><![CDATA[I just noticed that ModSecurity developer Ivan Ristic has started a new blog on computer security and open source. Check it out here: http://blog.ivanristic.com/
Great idea Ivan! 
]]></description>
		<wfw:commentRss>http://www.inliniac.net/blog/2008/01/22/new-security-weblog-by-ivan-ristic.html/feed</wfw:commentRss>
		</item>
		<item>
		<title>Tunnel unwrapping for Snort_inline 2.8.0.1</title>
		<link>http://www.inliniac.net/blog/2008/01/11/tunnel-unwrapping-for-snort_inline-2801.html</link>
		<comments>http://www.inliniac.net/blog/2008/01/11/tunnel-unwrapping-for-snort_inline-2801.html#comments</comments>
		<pubDate>Fri, 11 Jan 2008 16:24:37 +0000</pubDate>
		<dc:creator>Victor Julien</dc:creator>
		
		<category><![CDATA[IPv6]]></category>

		<category><![CDATA[Snort_inline]]></category>

		<category><![CDATA[freenet6]]></category>

		<category><![CDATA[ip6tunnel]]></category>

		<category><![CDATA[ipv4]]></category>

		<category><![CDATA[nitro security]]></category>

		<category><![CDATA[tunnel]]></category>

		<guid isPermaLink="false">http://www.inliniac.net/blog/2008/01/11/tunnel-unwrapping-for-snort_inline-2801.html</guid>
		<description><![CDATA[Not many people have native IPv6 connectivity and use some form of tunneling. For this reason Nitro Security asked me to develop a Snort preprocessor to unwrap various tunnels. This resulted in the preprocessor &#8216;ip6tunnel&#8217;, which I uploaded to Snort_inline&#8217;s SVN yesterday. The preprocessor is capable of unwrapping IPv6-in-IPv4, IPv6-in-IPv6, IPv4-in-IPv6, IPv4-in-IPv4 and finally IPv6-over-UDP. [...]]]></description>
		<wfw:commentRss>http://www.inliniac.net/blog/2008/01/11/tunnel-unwrapping-for-snort_inline-2801.html/feed</wfw:commentRss>
		</item>
		<item>
		<title>Snort_inline updated to 2.8.0.1 in SVN</title>
		<link>http://www.inliniac.net/blog/2008/01/09/snort_inline-updated-to-2801-in-svn.html</link>
		<comments>http://www.inliniac.net/blog/2008/01/09/snort_inline-updated-to-2801-in-svn.html#comments</comments>
		<pubDate>Wed, 09 Jan 2008 15:41:19 +0000</pubDate>
		<dc:creator>Victor Julien</dc:creator>
		
		<category><![CDATA[IPv6]]></category>

		<category><![CDATA[Snort]]></category>

		<category><![CDATA[Snort_inline]]></category>

		<category><![CDATA[libnet]]></category>

		<category><![CDATA[freebsd]]></category>

		<category><![CDATA[inline]]></category>

		<category><![CDATA[libdnet]]></category>

		<category><![CDATA[nitro security]]></category>

		<guid isPermaLink="false">http://www.inliniac.net/blog/2008/01/09/snort_inline-updated-to-2801-in-svn.html</guid>
		<description><![CDATA[I&#8217;ve just committed an update to Snort_inline&#8217;s SVN. It brings it to the Snort 2.8.0.1 level. It supports both IPv4 and IPv6 on IPQ and NFQ. I have not been able to test IPFW on IPv6, so I don&#8217;t think that will work currently.
This update removes the libdnet dependency and replaces it with libnet 1.1. [...]]]></description>
		<wfw:commentRss>http://www.inliniac.net/blog/2008/01/09/snort_inline-updated-to-2801-in-svn.html/feed</wfw:commentRss>
		</item>
		<item>
		<title>New Snortsam patch for Snort 2.8.0.1</title>
		<link>http://www.inliniac.net/blog/2008/01/08/new-snortsam-patch-for-snort-2801.html</link>
		<comments>http://www.inliniac.net/blog/2008/01/08/new-snortsam-patch-for-snort-2801.html#comments</comments>
		<pubDate>Tue, 08 Jan 2008 12:30:53 +0000</pubDate>
		<dc:creator>Victor Julien</dc:creator>
		
		<category><![CDATA[IPv6]]></category>

		<category><![CDATA[Snort]]></category>

		<category><![CDATA[Snortsam]]></category>

		<category><![CDATA[Emerging Threats]]></category>

		<category><![CDATA[Matt Jonkman]]></category>

		<guid isPermaLink="false">http://www.inliniac.net/blog/2008/01/08/new-snortsam-patch-for-snort-2801.html</guid>
		<description><![CDATA[Matt Jonkman of Emerging Threats asked me to have a look at the existing Snortsam 2.8.0.1 patch as people were continuing to report problems with it. I updated it to compile without compiler warnings, build cleanly with debugging enabled, build cleanly with Snort&#8217;s IPv6 support enabled and added a check so it won&#8217;t act on [...]]]></description>
		<wfw:commentRss>http://www.inliniac.net/blog/2008/01/08/new-snortsam-patch-for-snort-2801.html/feed</wfw:commentRss>
		</item>
		<item>
		<title>Working on Snort_inline 2.8.0.1</title>
		<link>http://www.inliniac.net/blog/2007/12/22/working-on-snort_inline-2801.html</link>
		<comments>http://www.inliniac.net/blog/2007/12/22/working-on-snort_inline-2801.html#comments</comments>
		<pubDate>Sat, 22 Dec 2007 12:49:20 +0000</pubDate>
		<dc:creator>Victor Julien</dc:creator>
		
		<category><![CDATA[IPv6]]></category>

		<category><![CDATA[Snort]]></category>

		<category><![CDATA[Snort_inline]]></category>

		<category><![CDATA[inline]]></category>

		<category><![CDATA[ipv4]]></category>

		<category><![CDATA[libdnet]]></category>

		<category><![CDATA[nitro security]]></category>

		<guid isPermaLink="false">http://www.inliniac.net/blog/2007/12/22/working-on-snort_inline-2801.html</guid>
		<description><![CDATA[The last week I&#8217;ve been working on bringing Snort_inline to the Snort 2.8.0.1 level, including it&#8217;s IPv6 support. I&#8217;m almost ready to commit it to SVN, there are just some issues I need to fix in the inline specific code. The code will get rid of libdnet and use libnet 1.1 for sending reset/reject packets [...]]]></description>
		<wfw:commentRss>http://www.inliniac.net/blog/2007/12/22/working-on-snort_inline-2801.html/feed</wfw:commentRss>
		</item>
	</channel>
</rss>
