Snort mailing list archives

ERROR: OpenPcap() FSM compilation failed: ??


From: "James R. Frisky" <backatyou () angelfire com>
Date: Wed, 29 Oct 2003 08:11:47 -0700

Hello Snort dudes,

I'm trying to feed Snort with Kismet as follows and kismet starts up okay as shown. I then start Snort as shown and 
after getting a bit of Kismet data from the pipe, Snort chokes with the "ERROR: OpenPcap() FSM compilation failed:" 
error shown below. Do you have any advice? Thanks.

lnx:/tmp# /usr/local/bin/kismet_server -l dump &
...kismet startup stuff...
Creating and opening named pipe '/tmp/kismet_dump'.  Kismet will now block until another utility opens this pipe.


lnx:/tmp# snort -r /tmp/kismet_dump -ev &
[2] 25592

...a mixture of kismet and snort stuff: ...
lnx:/tmp# Running in packet dump mode
Log directory = /var/log/snort
TCPDUMP file reading mode.
Reading network traffic from "/tmp/kismet_dump" file.
snaplen = 2344
GPSD cannot connect: Connection refused
Listening on port 2501.
Allowing connections from 128.0.0.0/128.0.0.0
Allowing connections from 0.0.0.0/128.0.0.0
Registering builtin client/server protocols...
Registering requested alerts...
Registering builtin timer events...
Enabling packet source 0 (prism2source)...
Gathering packets...
Sat Jan 19 18:34:20 1980 Found new network "router" bssid 00:40:05:36:82:02 WEP N Ch 0 @ 0.00 mbit
ERROR: OpenPcap() FSM compilation failed: 
        PCAP command: %s

Fatal Error, Quitting..
...kismet shutting down because of broken pipe follows...


____________________________________________________________
Get 25MB of email storage with Lycos Mail Plus!
Sign up today -- http://www.mail.lycos.com/brandPage.shtml?pageId=plus 


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: