Re: [Snort-inline-users] snort with snort_inline and clamav

[Will M. <wil...@gm...>]

> With snort 2.3RC2, I thought it had the snort_inline code
> rolled in. Therefore I would assume clamav support.
> However, no matter what I can get it to build with clamav.
> On the same system, snort_inline 2.2.0a builds with clamav
> and works flawlessly.

They decided they didn't want the clamav stuff in normal snort.  I'll
release a patch this weekend for clamav only against 2.3.0.  As soon
as Victor and I can find enough time finish up snort_inline-2.3.0 we
will release it with clamav+stickydrop+stream4inline.  Unfortunately
Victor and I both have full-time jobs and while  we would like to work
on snort_inline all the time we there just aren't enough hours in a
day.

> I want to run snort_inline on a bridged port and then snort
> on another interface, but I want both working with clamav
> alerts. Is this possible, or should I just use the
> snort_inline without the -Q option on the interface I want
> the ALERTS only on??

Yeah that should work fine.

Regards,

Will
On Wed, 29 Dec 2004 14:24:34 -0500, ka...@ez... <ka...@ez...> wrote:
> Ok, another clam question.
> 
> With snort 2.3RC2, I thought it had the snort_inline code
> rolled in. Therefore I would assume clamav support.
> However, no matter what I can get it to build with clamav.
> On the same system, snort_inline 2.2.0a builds with clamav
> and works flawlessly.
> 
> I want to run snort_inline on a bridged port and then snort
> on another interface, but I want both working with clamav
> alerts. Is this possible, or should I just use the
> snort_inline without the -Q option on the interface I want
> the ALERTS only on??
> 
> thanks
> Kat
> 
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real users.
> Discover which products truly live up to the hype. Start reading now.
> http://productguide.itmanagersjournal.com/
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>