[NTLUG:Discuss] Starting snort inline

[MadHat]

On Aug 16, 2005, at 12:56 PM, Jay Urish wrote:
> MadHat wrote:
>> On Aug 15, 2005, at 1:28 PM, Jay Urish wrote:
>>
>>> Hey Fellas,
>>> I have a snort question that isn't being answered on the snort list.
>>>
>>> I have a box that I ./configured snort with --enable-inline amd   
>>> make &&make install.
>>>
>>> According to the docs, I should be able to start snort with a ./  
>>> snort_inline and some options.
>>>
>>> The problem is that there is not an executable binary with that  
>>> name.
>>>
>>> Can anyone shed some light on this?
>>>
>> You may want to ask the NTSUG (North Texas Snort Users Group,   
>> ntsug.org).
>
> I have... And have gotten no answer.

oops.  I must have missed it there.

So looking, did you download snort_inline and compile it?  It is not  
included with the snort-xxx.tgz package.  It looks like what is in  
there has a couple of things that allow snort_inline to work, but it  
is not included.  I don't see mention of it except in the docs and  
configure files.  Looking briefly, the docs for it suck ass.  Since  
that cuts into Martin's business (SourceFire), doubt it is well  
supported by "snort.org" directly.

--
MadHat (at) Unspecific.com, C²ISSP
E786 7B30 7534 DCC2 94D5  91DE E922 0B21 9DDC 3E98
gpg --keyserver wwwkeys.us.pgp.net --recv-keys 9DDC3E98