CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2014/06/03 21:17:12
Modified files:
net/snort : Makefile
net/snort/patches: patch-etc_snort_conf
Log message:
Due to checksum offload, Snort might see bad checksums in outbound
packets since those checksums are not calculated until after Snort sees
those packets.
This causes Snort to discard those packets instead of processing them,
which in turn prevents Snort from triggering alerts for them.
To fix this, set checksum_mode to "none" in snort.conf to disable
Snort's checksum verification feature.
Looks OK to maintainer Markus Lude.
