We poll the networkinterface anytime we enter the network driver (typically for transmitting a packet) and from the process scheduler's idle loop.
一旦进入网络驱动(通常是传输一个数据包时)以及在进程调度器的空闲循环的时候,对网络接口进行轮询。
2
While configuration is a more general set of rules about how Snort should operate, rules tell Snort what to do every time a packet comes across a networkinterface that Snort monitors.