Snort mailing list archives

Re: running snort on Ubuntu


From: Jari Fredriksson <jarif () iki fi>
Date: Thu, 23 Feb 2012 08:58:35 +0200

23.2.2012 8:32, Jagan Mohan Reddy D kirjoitti:
$ sudo /usr/local/snort/bin/snort -de -i eth0 --daq-dir
/usr/local/lib/daq -l /var/log/snort/ -c /usr/local/snort/etc/snort.conf


While using the above command i'm getting the following errors......

[ Number of patterns truncated to 20 bytes: 1041 ]
ERROR: pcap DAQ does not support inline.
Fatal Error, Quitting..

What's wrong in that command .....?

Here i'm attaching my snort.conf  


 config daq_mode: inline

Remove/comment out that, or change to "passive". DAQ does not support
inline, just like the error says.



Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: