Introduction - If you have any usage issues, please Google them yourself
Snort 2.9 introduces the DAQ, or Data Acquisition library, for packet I/O. The DAQ replaces direct calls to libpcap functions with an abstraction layer that facilitates operation on a variety of hardware and software interfaces without requiring changes to Snort. It is possible to the DAQ type and mode when invoking Snort to perform pcap readback or inline operation, etc.