ERROR: Can't start DAQ (-1) - SIOCGIFHWADDR: No such device!

[jtravlos () rsignia com]

I'm a newbie with SNORT and I got it running, sort of. I am having two issues:


1) I did having SNORT working. I had to shutdown the system, when I rebooted, I started getting the following problem 
when I run SNORT. 


When I run the following commmand:
snort -u snort -g snort -i dag0:0 -c /etc/snort/snort.conf NOTE:(dag0:0 = port A of the DAG card, dag0:2 = port B)


Initializing Output Plugins!
Log Directory = /data/snortlog
pcap DAQ configured passive.
Acquiring network traffic from 'dag0:0".
ERROR: Can't start DAQ (-1) - SIOCGIFHWADDR: No such device!
Fatal Error, Quiting..


I get the same error if I run:
snort -u snort -g snort -i dag0:0 


I can capture data with a Endace DAG card. Tcpdump can see the DAG card and an capture traffic. 


I am runnig:
CentOS 6.3 x86_64
SNORT 2.9.31 GRE (Build 40)
Libpcap v 1.2.1
PCRE v 7.8
ZLIB v 1.2.3
tcpdump 4.0.0-3
daq 1.1.1-14
Endace 4.2.2 software 




Any help is appreciated.





John Travlos



------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!