Snort-inline is still snort, but with blocking capability. Snort-inline still sniffs in the same manner as Snort does, from my understanding of things. The quick way to find out is to run Snort-inline and grep for libipq when using lsof ("lsof | grep snort | grep libipq" should work).
|