Re: Problems with snort inline
Corey Minyard <[email protected]>
| Newsgroups | gmane.comp.security.ids.snort.general |
|---|---|
| Message-ID | <[email protected]> |
On Sat, Nov 06, 2021 at 08:12:05PM +0000, Joel Esler (jesler) wrote: > > > On Nov 6, 2021, at 13:59, Corey Minyard <[email protected]<mailto:[email protected]>> wrote: > > On Sat, Nov 06, 2021 at 12:51:13PM +0000, Dorian ROSSE via Snort-users wrote: > Hello, > > > eth0 is often a bad interface network, > > What the command line 'ifconfig' answer ? > > This is on qemu, and I know it works. I can bring up the network just > on eth0 and it works fine. > > The problem appears to be that snort is modifying the packets somehow. > > > Well, if you are inline, then yes, it will normalize and inspect traffic I even disabled all the normalize preops and it still didn't work. -corey _______________________________________________ Snort-users mailing list [email protected] Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users To unsubscribe, send an email to: [email protected] Please visit http://blog.snort.org to stay current on all the latest Snort news! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette