Data link type error

[Qinwen Hu <qhu009 () aucklanduni ac nz>]

Hi All:

I am running Snort -2.9.1.1 version, I was using my snort to read some IPv4
tracefiles last night. I got this error

Error: cannot decode data link type 197.
fatal error, Quitting..

By checking the tracefile, I find that the tracefile is not a completely IP
packet, it only contains few information, such as time, and few byte from
the data layer. no source address and destination address, so i just
wonder, if some one can tell me why I get this error.

second question, I have check my Snort configuration, I find the new snort
version using ipvar in the configure file, is that means both IPv4 and IPv6
protocol can be processed by using Snort?


Thank you very much for your time.


Regards

Steven

------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!