Re: Some help with barnyard needed

[Erek Adams <erek () snort org>]

On Wed, 21 May 2003, Nicholas Delo wrote:

[...snip...]

> ERROR => No input plugin found for magic: a1b2c3d4

[...snip...]

I'd guess it's one of two things:

        *  Wrong filetype.   You're using a pcap instead of unified.
        *  Endian-ness change.  You stored the packets on a little-endian
box and are processing them on a big-endian box--Or vice versa.

If it's the second, just store and process on the same type of box.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.net email is sponsored by: ObjectStore.
If flattening out C++ or Java code to make your application fit in a
relational database is painful, don't do it! Check out ObjectStore.
Now part of Progress Software. http://www.objectstore.net/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users