This is a port of FreeBSD divert socket mechanism to linux. This works in conjunction with IPtables and sends packets to user space. Similar to ip_queue but allows any number of unique user space listeners, such as Snort.
Follow Divert Sockets for Linux
Get visibility into the health and performance of your entire Cisco ASA environment in a single dashboard. View VPN tunnel status and monitor firewall high availability, health, and readiness. Automatically discover and filter within ACLs, show rule hit counts, and detect shadow and redundant rules. Automate the monitoring and management of your ASA infrastructure in a fully integrated solution. Try it free for 30 days!