Snort_inline
snort_inline is basically a modified version of Snort
that accepts packets from iptables and IPFW via libipq instead
of
libpcap. It interacts with the firewall by reading packets, and either
dropping, rejecting, altering, or passing them onto your network based
on your snort rules.
It uses new rule types to tell iptables if the packet should be dropped
or allowed to pass based on the Snort
rules.
snort_inline
supports all options currently configured with snort, but with the
additional functionality of processing packets from Linux IPTables
Queues.
Snort_inline
|
|
License
GNU GPL v2
Developer
William Metcalf, Victor Julien
Website
snort-inline.sourceforge.net
Requirements
libipq
Support:
FAQ
Selected
Reviews:
|
Features include:
- See Snort
page for details
Return
to Security Home Page
Last Updated Sunday, March 04 2012 @ 12:39 PM EST |