[NTLUG:Discuss] Starting snort inline

[Jay Urish]

MadHat wrote:
> On Aug 16, 2005, at 12:56 PM, Jay Urish wrote:
> 
>> MadHat wrote:
>>
>>> On Aug 15, 2005, at 1:28 PM, Jay Urish wrote:
>>>
>>>> Hey Fellas,
>>>> I have a snort question that isn't being answered on the snort list.
>>>>
>>>> I have a box that I ./configured snort with --enable-inline amd   
>>>> make &&make install.
>>>>
>>>> According to the docs, I should be able to start snort with a ./  
>>>> snort_inline and some options.
>>>>
>>>> The problem is that there is not an executable binary with that  name.
>>>>
>>>> Can anyone shed some light on this?
>>>>
>>> You may want to ask the NTSUG (North Texas Snort Users Group,   
>>> ntsug.org).
>>
>>
>> I have... And have gotten no answer.
> 
> 
> oops.  I must have missed it there.
> 
> So looking, did you download snort_inline and compile it?



I think this is where I screwed up. I downloaded the main package...

Give me a day or so... I am all over this..


   It is not
> included with the snort-xxx.tgz package.  It looks like what is in  
> there has a couple of things that allow snort_inline to work, but it  is 
> not included.  I don't see mention of it except in the docs and  
> configure files.  Looking briefly, the docs for it suck ass.  Since  
> that cuts into Martin's business (SourceFire), doubt it is well  
> supported by "snort.org" directly.

-- 
Jay Urish    Systems Engineer
Unixwolf Enterprises LLC.
http://www.unixwolf.net
972.691.0125    972.965.6229