Re: [Snort-inline-users] Running multiple snortinline on same interface

[Sanjai N. <na...@re...>]

Thanks, Will. I appreciate your informative reply. -- Sanjai


On Sat, 20 Aug 2005, Will Metcalf wrote:

> This is a ip_queue limitation, not a snort-inline limitation. NFQUEUE
> which will be included in the 2.6.14 kernel will support multiple
> queue targets, hence you will be able to run multiple instances of
> snort-inline once we add support for it ;-).
>
> Regards,
>
> Will
>
> On 8/19/05, Sanjai Narain <na...@re...> wrote:
>> We have two independently developed snortinline applications that we'd now
>> like to run on the same interface. Is this possible via snort
>> configuration, or do we have to merge the source code in the preprocessors
>> directory and rebuild a single application? I would greatly appreciate any
>> assistance.
>>
>> We tried starting up both snort binaries on the same interface but got an
>> error (I believe it was resource busy).  However, if we run two copies of
>> the non-inline Snort applications on the same interface, there is no error.
>>
>> Thanks. --
>> Sanjai Narain
>> Senior Research Scientist
>> Telcordia Technologies
>>
>>
>>
>>
>>
>> -------------------------------------------------------
>> SF.Net email is Sponsored by the Better Software Conference & EXPO
>> September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
>> Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
>> Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
>> _______________________________________________
>> Snort-inline-users mailing list
>> Sno...@li...
>> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>>
>