Snort mailing list archives

Starting Snort Errors-Fedora3


From: Mark Sargent <powderkeg () snow email ne jp>
Date: Fri, 11 Mar 2005 16:57:25 +0900

Hi All, am a Linux user, Fedora3. Rather new to it, and snort as well. I have installed snort and have apache/mysql running. Am following the tutorial for FC2 from Patrick S. Harper. I just tried starting snort and got the following,

[root@localhost snort]# snort -i 192.168.0.12 -dev ./var/logs/snortlogs/snort Running in packet dump mode Initializing Network Interface 192.168.0.12 ERROR: OpenPcap() device 192.168.0.12 open: ioctl: No such device Fatal Error, Quitting..

I'm running 2 nics, one for external and one for internal. I want snort to watch the internal, 192.168.0.12 on eth0. I feel perhaps I haven't installed something snort is dependant on, yes,..? I tried a few times, with some differences in the command,

[root@localhost ~]# snort -i eth0 -dev ./var/logs/snortlogs/snort Running in packet dump mode Initializing Network Interface eth0 ERROR: OpenPcap() FSM compilation failed: illegal char '.' PCAP command: ./var/logs/snortlogs/snort Fatal Error, Quitting..

[root@localhost ~]# snort -i eth0 -dev /var/logs/snortlogs/snort Running in packet dump mode Initializing Network Interface eth0 ERROR: OpenPcap() FSM compilation failed: syntax error PCAP command: /var/logs/snortlogs/snort Fatal Error, Quitting.. Little lost. Can someone direct to where I should be.? Cheers.

Mark Sargent.


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: