Snort mailing list archives
Re: Snort not running on eth1
From: Matt Kettler <mkettler () evi-inc com>
Date: Fri, 09 Jul 2004 13:09:45 -0400
At 12:21 PM 7/9/2004, Patrick Marquetecken wrote:
If i try to start snort on eth1 i get this error: snort -I eth1 -c /etc/snort/snort.conf
try snort -i eth1 -c /etc/snort/snort.conf The parameter you want is lower-case, not upper case.-I causes snort to print the receiving interface name in the logs, and accepts no parameters
-i selects an interface by name, and the name of the interface follows.Since you used capital I, snort is treating "eth1" as a bpf declaration, which isn't valid bpf syntax and it fails.
------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training.Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort not running on eth1 Patrick Marquetecken (Jul 09)
- Re: Snort not running on eth1 Matt Kettler (Jul 09)