Upstream has accepted one of my IPFW DAQ fixes, so update the patch file
accordingly.
Tested with Snort 2.9.5.3 (which will be committed shortly) on amd64 and
i386. Before the 64-bit time_t change, it was also tested on amd64 and
i386 (by myself and Adam Jeanguenat) and on macppc.
properly in inline mode:
1. A bug in ipfw_daq_inject() ignores the buf and len arguments that are
passed to it. This prevents Snort inline mode from dropping/rejecting
packets that match "drop" or "reject" rules.
2. Remove DAQ_CAPA_UNPRIV_START from the list of capabilities so that
Snort can run as an unprivileged user when using the IPFW DAQ module.
Tested by myself and Adam Jeanguenat. Received guidance from sthen@.
Both fixes have been sent upstream.
DAQ, or Data Acquisition library, is a library for packet I/O. The DAQ
replaces direct calls to PCAP functions with an abstraction layer.
This port is needed by the upcoming Snort 2.9.3.1 update.
From Markus Lude, and includes a tweak from sthen@.
OK abieber@ sthen@
