en0 problems

[Allan Jensen <ajensen () bajensen de>]

I installed snort 2.2.0 on Mac OS X 10.3.6 together with ACID 0.9.6b23. Everything went fine. My problem is maybe not a snort problem. When I start snort:

sudo snort -vd -c /etc/snort/snort.conf

I get the following warning:

Running in IDS mode
Log directory = /var/log/snort

Initializing Network Interface en0
OpenPcap() device en0 network lookup: 
en0: no IPv4 address assigned

--== Initializing Snort ==--
Initializing Output Plugins!
Decoding Ethernet on interface en0
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file /etc/snort/snort.conf

and nothing is output to ACID - or to mysql. I checked:

echo "SELECT count(*) FROM event" | mysql snort -u root -p ) 

which gives:

count(*)
0

Does anybody know how to tell snort to use the ppp0 interface for en0 ? Is this a Mac OS X issue?

Thanks,
Allan