Snort mailing list archives

Problem with Upgrading to 1.9


From: "Linus Hindmarsh" <linus () hindmarsh org>
Date: Tue, 8 Oct 2002 07:47:52 +1000

Hi,
I have just upgraded to Snort 1.9 from Snort 1.87 using the RPM
binaries. I edited the snort.conf and used the HOME_NET variable as I
did in the previous version.
 
var HOME_NET [$ppp0_ADDRESS,192.168.0.0/24]
(I am connecting using an ADSL connection, which is connected to eth2
and this worked with snort 1.8.7)
 
However when I start snort, I get the following log messages:
 
Oct  8 06:06:27 kylie snort: Initializing Output Plugins!
Oct  8 06:06:27 kylie kernel: eth0: Setting promiscuous mode.
Oct  8 06:06:27 kylie kernel: device eth0 entered promiscuous mode
Oct  8 06:06:27 kylie snort: ERROR: OpenPcap() FSM compilation failed:
^Iparse error
Oct  8 06:06:27 kylie snort: FATAL ERROR: PCAP command: ppp0
Oct  8 06:06:27 kylie kernel: device eth0 left promiscuous mode
Oct  8 06:06:27 kylie snortd: snort startup failed
 
Can anyone tell me if I have missed anything. Or is this something that
changed in the new version.
 
Other info:
Redhat 7.3
Libpcap 0.6.2
 
Linus Hindmarsh

Current thread: