From: <ka...@ez...> - 2004-12-29 19:31:43
|
Ok, another clam question. With snort 2.3RC2, I thought it had the snort_inline code rolled in. Therefore I would assume clamav support. However, no matter what I can get it to build with clamav. On the same system, snort_inline 2.2.0a builds with clamav and works flawlessly. I want to run snort_inline on a bridged port and then snort on another interface, but I want both working with clamav alerts. Is this possible, or should I just use the snort_inline without the -Q option on the interface I want the ALERTS only on?? thanks Kat |