Thanks, everyone for the info on pfdnacluster_master. Now I just need to figure out the best way to get snort back inline. Previously I was specifying the two dna interfaces when starting each instance of snort along with the "-Q" option for inline mode. This allowed snort to manage the bridging of the interfaces. I don't seem to be able to do the same when using the dnacluster queues.
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
