Snort mailing list archives
Snort on Leopard 10.5.4...getting there
From: James Lay <jlay () slave-tothe-box net>
Date: Sat, 13 Sep 2008 07:56:04 -0600
So I¹ve got snort 2.8.3 running right now on Leo 10.5.4 (YaY). Dynamic preprocessors tank with a Bus Error however. Who do I send the crash log to? Also, does anyone have a good plist startup file for snort on OS X? Everything works but the filter option (example: ³ip and not host bleh²) doesn¹t seem to get passed correctly to snort: Sep 9 19:51:30 slave-tothe-box snort[346]: FATAL ERROR: OpenPcap() FSM compilation failed: \n illegal token: "\nPCAP command: "ip and not port 21746" Of course, running command line it works just fine (have I mentioned how much I loathe launchd?). Danke folks James
------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort on Leopard 10.5.4...getting there James Lay (Sep 13)
- <Possible follow-ups>
- Re: Snort on Leopard 10.5.4...getting there James Lay (Sep 13)
- Re: Snort on Leopard 10.5.4...getting there James Lay (Sep 18)