Snort mailing list archives
Re: Enc: Problems to start snort 2.9
From: Russ Combs <rcombs () sourcefire com>
Date: Thu, 31 Mar 2011 14:21:11 -0400
Looks like someone posted the same error about a year ago on snort.org with 2.8.5, apparently w/o resolution. What type of interface is it? libpcap will assume SLL for unknown types and expect the kernel to leave room to prepend the header. Appears to be making the wrong assumption. On Thu, Mar 31, 2011 at 1:48 PM, Ivani A. Nascimento < ivani_nascimento () yahoo com br> wrote:
Hi, folks! I'm newbie using Snort and I have a doubt. I've googled many sites, lists, but I'm lost about a weird error. I've installed the snort 2.9 but I can't start it. Looking the logs, I've found: Mar 31 13:45:18 snortlab snort[16294]: --== Initialization Complete ==-- Mar 31 13:45:18 snortlab snort[16294]: Commencing packet processing (pid=16294) Mar 31 13:45:19 snortlab snort[16294]: Can't acquire (-1) - cooked-mode frame doesn't have room for sll header! --- --- Mar 31 13:45:50 snortlab snort[16294]: =============================================================================== Mar 31 13:45:50 snortlab snort[16294]: =============================================================================== Mar 31 13:45:50 snortlab snort[16294]: dcerpc2 Preprocessor Statistics Mar 31 13:45:51 snortlab snort[16294]: Total sessions: 0 Mar 31 13:45:51 snortlab snort[16294]: =============================================================================== Mar 31 13:45:52 snortlab snort[16294]: =============================================================================== Mar 31 13:45:52 snortlab snort[16294]: Snort exiting I'm using CentOS 5.5. Anyone you help me? Thanks for advance, Nix ------------------------------------------------------------------------------ Create and publish websites with WebMatrix Use the most popular FREE web apps or write code yourself; WebMatrix provides all the features you need to develop and publish your website. http://p.sf.net/sfu/ms-webmatrix-sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------ Create and publish websites with WebMatrix Use the most popular FREE web apps or write code yourself; WebMatrix provides all the features you need to develop and publish your website. http://p.sf.net/sfu/ms-webmatrix-sf
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Enc: Problems to start snort 2.9 Ivani A. Nascimento (Mar 31)
- Re: Enc: Problems to start snort 2.9 Russ Combs (Mar 31)
- <Possible follow-ups>
- Re: Enc: Problems to start snort 2.9 Ivani A. Nascimento (Mar 31)
- Re: Enc: Problems to start snort 2.9 Jason Wallace (Mar 31)