Re: Snort error: Cannot decode data link type 105

[Leo Nespoli <leo4b () hotmail it>]

Thanks for your answer.
I'm not using a pcap, I'm trying to sniff a Wireless lan using Kismet, and then run snort on the "kistap0" interface 
created by Kismet. When I try to run snort:/usr/local/bin/snort -i kistap0
the error appears!
From: allewi () cisco com
To: leo4b () hotmail it; snort-users () lists sourceforge net
Subject: RE: [Snort-users] Snort error: Cannot decode data link type 105
Date: Wed, 13 Apr 2016 12:50:46 +0000









Can you send us a pcap of the traffic please?
 
Thanks.
 
 

Albert Lewis
QA Software Engineer
SOURCEfire, Inc.
now part of 
Cisco
9780 Patuxent Woods Drive

Columbia, MD 21046 
Phone: (office) 443.430.7112
Email:
allewi () cisco com 

 


From: Leo Nespoli [mailto:leo4b () hotmail it]


Sent: Wednesday, April 13, 2016 6:15 AM

To: snort-users () lists sourceforge net

Subject: [Snort-users] Snort error: Cannot decode data link type 105


 

Hi!

 


I'm trying to use the Kismet tun/tap interface with Snort 2.9.8.0


 


I compiled snort with --enable-non-ether-decoders --enable-sourcefire


 


But no way... the error is always there.


 


Any ideas? Thanks to all!


------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!