Sflowtool and Snort

[melanie.te.laake () ipt fraunhofer de]

Hi everyone,

I'm trying to use Snort 2.8.1 with sflowtool 3.12 but I get the following 
error:

sflowtool -t | snort -c /etc/snort/snort.conf -r -
        Error getting stat on pcap file: -: No such file or directory
        ERROR: Error getting pcaps
        Fatal Error, Quitting..

I've also tried to use named pipes with a fifo-file with the same result:
sflowtool -t > fifo.pcap
snort -c /etc/snort/snort.conf -r fifo.pcap
        Specified pcap is not a regular file: fifo.pcap
        ERROR: Error getting pcaps
        Fatal Error, Quitting..

Snort is working fine when it listens on eth0.
I've tested the following and it worked fine, too: 
sflowtool -t | tcpdump -r -

I would be pleased if you could help me!
Melanie

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users