Snort mailing list archives

pppoe


From: Виктор Захаров <zakharru () gmail com>
Date: Tue, 13 Dec 2011 22:09:48 +0400

Good evening
I use 2.9.1 version on gentoo, and try to use ppp0 interface -  /etc/conf.d
/snort -

SNORT_IFACE="ppp0"
SNORT_CONF="/etc/snort/snort.conf"
SNORT_OPTS="-D -u snort -i $SNORT_IFACE -c $SNORT_CONF

snort started but writes this message
Decoding Ethernet
Dec 13 21:09:37 snort[24843]: FATAL ERROR: Can't start DAQ (-1) -
start_instance: invalid interface type for device ppp0: 512 != 1!

if i use eth0, eth1 interface- snort started normal
------------------------------------------------------------------------------
Systems Optimization Self Assessment
Improve efficiency and utilization of IT resources. Drive out cost and 
improve service delivery. Take 5 minutes to use this Systems Optimization 
Self Assessment. http://www.accelacomm.com/jaw/sdnl/114/51450054/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: