snort-devel July 2008 archive
Main Archive Page > Month Archives  > snort-devel archives
snort-devel: [Snort-devel] Question about DAQ in snort 3.0

[Snort-devel] Question about DAQ in snort 3.0

From: Xiao Jun <xiaojuntime_at_nospam>
Date: Fri Jul 04 2008 - 09:12:53 GMT
To: snort-devel@lists.sourceforge.net


Hi All,

I am wondering the snort 3.0 beta + iptables (IPS mode) workable or not, that means how did the engine return back the detection result (for example, drop or reject) back to data source?

BTW, at line 147 of daq_ipq.c, "dd.resolution" should be used to return the detection result, but I even can not find out the definition for resolution.

Thanks,
Jun



Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel