RE: [Snort-inline-users] snort inline hangs and ip_queue not working?

[Brent D. <br...@de...>]

I ran into this and realized I had a snort_inline process running in daemon
mode still. Don't know if that helps or not.

-- Brent
  -----Original Message-----
  From: sno...@li...
[mailto:sno...@li...]On Behalf Of Thomas
Pollet
  Sent: Tuesday, November 25, 2003 10:54 AM
  To: sno...@li...
  Subject: Re: [Snort-inline-users] snort inline hangs


    Hi,

    I'm trying to set up snort inline. But after initialization it errors
    with code 16. Seems to be an ipq problem
    (the sample program from libipq manual gave same error).
    I guess I missed something during setup, but can't find out exactly
what.
    I'd highly appreciate any help.

    thanks in advance,

    Thomas Pollet

    This problem is quite similiar to the one discussed in

http://sourceforge.net/mailarchive/forum.php?thread_id=3303416&forum_id=3293
3
    although nobody posted a solution.

    for the record,

    I am using slackware 9, kernel 2.4.22,  iptables-1.2.9 and my lsmod
looks like


    Module                  Size  Used by    Not tainted
    iptable_filter          1644   1  (autoclean)
    ip_conntrack_irc        2992   0  (unused)
    ip_conntrack_ftp        3888   0  (unused)
    ip_conntrack           18016   2  [ip_conntrack_irc ip_conntrack_ftp]
    ipt_LOG                 3384   0  (unused)
    ip_tables              11768   2  [iptable_filter ipt_LOG]
    pcmcia_core            38112   0
    ip_queue                5420   0  (unused)
    ide-scsi                8048   0
    3c59x                  26736   1
    nls_cp850               3580   1  (autoclean)
    nls_iso8859-15          3356   2  (autoclean)
    ntfs                   51040   2  (autoclean)