snort-devel: [Snort-devel] Question about DAQ in snort 3.0
[Snort-devel] Question about DAQ in snort 3.0
I am wondering the snort 3.0 beta + iptables (IPS mode) workable or not,
that means how did the engine return back the detection result (for
example, drop or reject) back to data source?
BTW, at line 147 of daq_ipq.c, "dd.resolution" should be used to
return the detection result, but I even can not find out the
definition for resolution.
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
Snort-devel mailing list