anth0 and Snort AppID use Question
-
-
-
Yes, it should work on any interface. You may not be able to use in-line mode though since that requires netmap support for useful throughput.
-
@stephenw10 I have the 2100 I can't get inline mode to enable. It's because it doesn't load the "SO" rules Bill Meeks said it's because it's an ARM processor.
-
Yup on ARM it's moot. But for anyone else using Snort with ath(4) on x86 it's probably a restriction.
-
@stephenw10 I originally didn't think it would work. But it does. It's amazing.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.