Re: ERROR: Can't set DAQ BPF filter to 'status' (pcap_daq_set_filter: pcap_compile: syntax error)! Fatal Error, Quitting..

[k vijay sai Prashanth <vijaysaiprashanth () gmail com>]

Okay. So the below command should do it right?

snort -i eth2 -c /etc/snort/snort.conf -T

Regards,
Prashanth


On Thu, Oct 10, 2013 at 4:02 PM, k vijay sai Prashanth <
vijaysaiprashanth () gmail com> wrote:

> I've also run snort using command
>
> Command: snort -D -c /etc/snort/snort.conf -i eth2
>
> This creates the log file but there are no enteries to the log file. The
> space of the log file is constant at zero.
>
> Regards,
> Prashanth
>
>
> On Thu, Oct 10, 2013 at 3:43 PM, k vijay sai Prashanth <
> vijaysaiprashanth () gmail com> wrote:
>
> > Hello All,
> >
> > I am running snort in test mode with the following command to get the
> > error message displayed below. Please help me.
> >
> > Command: snort -T -c /etc/snort/snort.conf /usr/local/bin/snort -A
> > console -q -u root -c /etc/snort/snort.conf -i eth2
> >
> > Error Message: ERROR: Can't set DAQ BPF filter to '/usr/local/bin/snort'
> > (pcap_daq_set_filter: pcap_compile: syntax error)!
> > Fatal Error, Quitting..
> >
> > Let me know if anything other information is required to obtain a
> > solution for this issue. Googling for this has displayed many unrelated
> > issues. So I am out of options and hence posting here! Where should I begin
> > troubleshooting?
> >
> > Warm Regards,
> > Prashanth
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134071&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!