Re: [Snort-inline-users] "failed to send netlink" error

[Rob M. <rv...@ca...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yes.  This is telling you that snort_inline has not been able to establish 
a connection with the ip_queue kernel module.  This is how snort_inline 
communicates with iptables.  Simply do:

insmod ip_queue

and try again.  Also, if you want to send packets to snort_inline use the 
iptables -j QUEUE target.  For example, if I want to send all web traffic 
entering my box to snort_inline:

iptables -A INPUT -p tcp --dport 80 -j QUEUE
snort_inline -Qc /etc/snort_inline/snort_inline.conf

Hope this helps,

Rob

On Tue, 27 May 2003, Lia Treffman wrote:

> Hi,
> I'm trying to set up Snort_inline, and I am getting the error message:
> InitInline: : failed to send netlink message: unable to connect
> Has anybody else run into this??  Any ideas what it means?
> Thanks!
> Lia Treffman
> Optivel, Inc.
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: ObjectStore.
> If flattening out C++ or Java code to make your application fit in a
> relational database is painful, don't do it! Check out ObjectStore.
> Now part of Progress Software. http://www.objectstore.net/sourceforge
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
> 
> 
> 

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.76

iQA/AwUBPtQFufnAyY+9KLjdEQLSxQCgjGUO4v2khuUqzfxyix3k++zuTeMAnjm5
G8oq0Zx6QNtTud5Ohd01ymLs
=F3qz
-----END PGP SIGNATURE-----