Snort without TCP stack -just NIC driver-.

["Ivan Menendez" <ivanmenendez () wanadoo es>]

Hi there,

        I have heard -voices from very far- that is possible to run snort capturing
the network traffic with just the driver, not having any tcp/ip stack, and
so making the IDS totally undetectable; I can suppose this is no easy task,
but if any have any info about making this possible, I would appreciate a
lot such info.

        Many thanks. Best regards.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users