Re: Snort+flexresp and "raw socket for libnet"

["Tudor Panaitescu" <tpanaitescu () colorcon com>]

Thank you. This makes perfect sense .... I wish I thought of this before... It
works like a charm ...

All the best,
Tudor








Fyodor <fygrave () tigerteam net> on 01/23/2002 07:07:02 AM
                                                              
                                                              
                                                              
  To:          Tudor Panaitescu/ColorconUS@ColorconUS         
                                                              
  cc:                                                         
                                                              
                                                              
                                                              
  Subject      Re: [Snort-users] Snort+flexresp and "raw      
  :            socket for libnet"                             
                                                              






you will need to run it as root...

On Tue, Jan 22, 2002 at 02:22:17PM -0500, Tudor Panaitescu wrote:
> Hello fellow snorters,
>
> I am trying to use the flexresp in snort and I am getting this error:
>
> FATAL ERROR: ERROR: cannot open raw socket for libnet, exiting...
>
> Architecture: RedHat 7.2 + kernel 2.4.17 + snort-plain+flexresp-1.8.3-5snort +
> snort-1.8.3-5snort + libnet-1.0.2a-1snort. eth0 10.x.x.x in the internal
> network, eth1 no IP address assigned but up, between the router & the
firewall.
> Everytime I try to modify a rule with ...; resp: rst_snd,icmp_all; etc. I get
> the error mentioned above ...
>
> What am I missing ? Any help would be appreciated ...
>
> TIA and all the best,
> Tudor
>
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

--
http://www.notlsd.net
PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users