Snort Forums Archive

Archive Home » Windows » inline

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

inline

Posted by ArmoredGoat on January 31, 2006 06:18:27

I'm trying to set up snort to run inline with the windows OS on a VoIP network. How do I go about setting up the inline in windows?

Posted by brevizniak on February 01, 2006 17:42:26

unfortunately inline does not work on windows. You need linux to run inline.

Posted by big_boi on May 20, 2006 07:41:12

and i take it this doesn't work on openBSD either? it REQUIRES the use of iptables?

Posted by brevizniak on May 20, 2006 08:44:34

This depends. There is some code to use divert sockets which might work. I don't use OpenBSD so I cannot say but if you have ipfw have a look here for some information on setting it up.

http://freebsd.rogness.net/snort_inline/

Posted by NickRogness on January 16, 2007 18:13:45

After several failed attempts to work with the PF people to get snort_inline to work with PF, I gave up and focused on FreeBSD. AFAIK, PF still has no way to interact (in an inline fashion) with a userland application like snort_inline.

If I could get some packet API from PF, it would take a few days to add OpenBSD support.