[Snort-users] Snort and nf_queue

--===============0519965453==
Content-Type: multipart/alternative; boundary="0-64547021-1185430743=:88703"
Content-Transfer-Encoding: 8bit

--0-64547021-1185430743=:88703
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

Hi everyone!
I run Snort-2.6.1.4 in IDS mode and see that it works with nf_queue correctly.
But when I search in the src-code, I can't find any function that handles
the nf_queue packets.
Also, I send the receiving packets to several nf_queue and see that Snort handles
all of them! where is it identifies the queue_nums and works with them?

Thank you,
Bahamin


---------------------------------
Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, photos & more.
--0-64547021-1185430743=:88703
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

Hi everyone!<br>I run Snort-2.6.1.4 in IDS mode and see that it works with nf_queue correctly.<br>But when I search in the src-code, I can't find any function that handles<br>the nf_queue packets.<br>Also, I send the receiving packets to several nf_queue and see that Snort handles<br>all of them! where is it identifies the queue_nums and works with them?<br><br>Thank you,<br>Bahamin<br> <p>
<hr size=1>Take the Internet to Go: Yahoo!Go puts the <a href="http://us.rd.yahoo.com/evt=48253/*http://mobile.yahoo.com/go?refer=1GNXIC">Internet in your pocket:</a> mail, news, photos & more.
--0-64547021-1185430743=:88703--


--===============0519965453==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
--===============0519965453==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
--===============0519965453==--