Re: Network Interface Issue in Ubuntu 16.04

[James Lay <jlay () slave-tothe-box net>]

What's your snort.conf look like?  Looks like you have it set for
inline.
James
On Sat, 2017-02-18 at 08:42 +0700, tantioification . wrote:
> Like your suggestion
>
> snort -T -c <my file snort.conf> -i <my interface enp4s0>
>
> root@snortIDS:/home/adminids# snort -T -c /etc/snort/snort.conf -i
> enp4s0
> Running in Test mode
>
>         --== Initializing Snort ==--
> Initializing Output Plugins!
> Initializing Preprocessors!
> Initializing Plug-ins!
> Parsing Rules file "/etc/snort/snort.conf"
>
>
> On Sat, Feb 18, 2017 at 8:21 AM, James Lay <jlay () slave-tothe-box net>
> wrote:
> > What's your start line?
> >
> > On Sat, 2017-02-18 at 07:52 +0700, tantioification . wrote:
> > > Same as before, invalid interface error.
> > >
> > > afpacket DAQ configured to inline.
> > > ERROR: Can't initialize DAQ afpacket (-1) -
> > > afpacket_daq_initialize: Invalid interface specification:
> > > 'enp4s0'!
> > > Fatal Error, Quitting..
> > >
> > > ---------------------------------------------------------------
> > > ---------------
> > > Check out the vibrant tech community on one of the world's most
> > > engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-use
> > > rs
> > >
> > > Please visit http://blog.snort.org to stay current on all the
> > > latest Snort news!
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!