Re: [Snort-inline-users] Re: Snort-inline-users digest, Vol 1 #478 - 1 msg

[James B. <jl...@bo...>]

Thanks Will.

I allowed Nick to SSH into my machine to try and get it working under  
Mac OS X. Unfortunately the latency was too high for him to be very  
productive on it.

On 28/10/2005, at 2:54 PM, Nick Rogness wrote:
>
> On the status of running snort_inline on Mac OS X:
>
> There appears to be a problem with MacOS and mangling the packet in
> inline mode.  Snort_inline is working and passing packets OK  
> through the
> firewall...it just appears that there is something wrong with the
> packets after inline inspects them.
>
> Also, rejects cause bus error's (which is bad!). Yeh, it compiles,  
> but it
> doesn't work.

This is what he said on 30 Jan 2006 on this list:

"I am working on Mac OS X and will likely be a patched
version of 2.4.3.  If anyone has SSH access to a Mac that I can build
on, it would speed this process along.  Email me privately at
ni...@ro... if will let me use your machine to test on."

Unfortunately I have pretty meager programming skills, so I can't  
contribute to the code itself. If I can help in any other way I  
would. If I use QoS on my switch would that help reduce the latency?  
Or is it just because we are on the wrong side of the world? I've  
doubled our upload speed since Nick had his last attempt. If we can  
get SSH working acceptably I'd be happy to grant access to my  
computer if that would help.

Regards,

James.

On 24/04/2006, at 2:51 PM, Will Metcalf wrote:

> Nick Rogness was working on it but unfortunately he won't be able to
> do any coding for a while.  I don't have a MacOSX box, and neither do
> Dave or Victor.  You want to build support for MacOS X be my guest,
> let me know when you get a patch together and we will be sure to
> include it.
>
> Regards,
>
> Will