Re: Freebsd & snort inline



ruurdster@xxxxxxxxx wrote:
Hi,

I want to use snort-inline on my freebsd 6.1 box with ipfw, bridge and mysql. I have it configured the right way. But the only alerts/drops i get are the following:

(snort decoder) Bad Traffic Loopback IP (snort decoder) Bad Traffic Same Src/Dst IP

I heard that the freebsd divert do not work with the bridge? I hope someone figured it out.


Thanks in advantage

Ruurd

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

It works just FINE - I'm currently using it on STABLE-5 and STABLE-4, tested on STABLE-6 a week ago. describe your configs and task. It must work just fine.

Alexey "Steel Scorpion 666" Vesnin

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



Relevant Pages

  • Freebsd & snort inline
    ... I want to use snort-inline on my freebsd 6.1 box with ipfw, bridge and mysql. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)
  • Re: Re: Freebsd & snort inline
    ... I'm not exactly sure but I don't think you will have any luck getting the bridge going with snort inline. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)
  • RE: Verifying E-Mail Addresses
    ... correspondence with the sender upon realizing your own ignorance, ... Original> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... Original> The NSA has designated Norwich University a center of Academic ... Original> in Information Security. ...
    (Security-Basics)
  • Re: user default password checking tool
    ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ... The NSA has designated Norwich University a center of Academic Excellence in Information Security. ... Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. ...
    (Security-Basics)
  • Re: dd vs windows...
    ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ... in Information Security. ... Our program offers unparalleled Infosec management ...
    (Security-Basics)