[Snort-inline-users] Running multiple snortinline on same interface

[Sanjai N. <na...@re...>]

We have two independently developed snortinline applications that we'd now
like to run on the same interface. Is this possible via snort
configuration, or do we have to merge the source code in the preprocessors
directory and rebuild a single application? I would greatly appreciate any
assistance.

We tried starting up both snort binaries on the same interface but got an
error (I believe it was resource busy).  However, if we run two copies of
the non-inline Snort applications on the same interface, there is no error.

Thanks. --
Sanjai Narain
Senior Research Scientist
Telcordia Technologies