snort-devel July 2008 archive
Main Archive Page > Month Archives  > snort-devel archives
snort-devel: [Snort-devel] Question about DAQ in snort 3.0

[Snort-devel] Question about DAQ in snort 3.0

From: Xiao Jun <xiaojuntime_at_nospam>
Date: Fri Jul 04 2008 - 09:12:53 GMT

Hi All,

I am wondering the snort 3.0 beta + iptables (IPS mode) workable or not, that means how did the engine return back the detection result (for example, drop or reject) back to data source?

BTW, at line 147 of daq_ipq.c, "dd.resolution" should be used to return the detection result, but I even can not find out the definition for resolution.


Sponsored by: Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at

Snort-devel mailing list