Snort mailing list archives
Re: ERROR: Can't set DAQ BPF filter to 'dna0:dna1' (pfring_daq_set_filter: BPF state machine compilation failed!)!
From: Avery Rozar <Avery.Rozar () i-techsupport com>
Date: Wed, 14 Aug 2013 15:05:57 +0000
This is just my first one. On 8/14/13 10:16 AM, "Y M" <snort () outlook com> wrote:
How many snort processes are you running? -----Original Message----- From: "Avery Rozar" <Avery.Rozar () i-techsupport com> Sent: ?8/?14/?2013 3:38 PM To: "waldo kitty" <wkitty42 () windstream net>; "snort-users () lists sourceforge net" <snort-users () lists sourceforge net> Subject: Re: [Snort-users] ERROR: Can't set DAQ BPF filter to 'dna0:dna1' (pfring_daq_set_filter: BPF state machine compilation failed!)! I was missing the -I, thanks Russ. snort -c /etc/snort/snort.conf -A console -i dna0:dna1 --daq-dir /usr/local/lib/daq --daq pfring --daq-var clusterid=10 --daq-mode inline -Q Now I'm getting a clusterid error. pfring DAQ configured to inline. dna0 <-> dna1 ERROR: Can't initialize DAQ pfring (-1) - pfring_daq_initialize: not enough cluster ids (1) Looking threw the users guide right now. On 8/13/13 7:05 PM, "waldo kitty" <wkitty42 () windstream net> wrote:On 8/13/2013 15:53, Avery Rozar wrote:Trying to run my new box with a silicom card with DNA license. When I try to start snort, I get the following error. Though, I don't even have BPF set, its #ed out. ERROR: Can't set DAQ BPF filter to 'dna0:dna1' (pfring_daq_set_filter: BPF state machine compilation failed!)! Is this a snort, or DNA config issue?what is your exact command line to start snort... if you use a script, what does that script generate for the actual command line to start snort? -- NOTE: No off-list assistance is given without prior approval. Please keep mailing list traffic on the list unless private contact is specifically requested and granted. ------------------------------------------------------------------------- - ---- Get 100% visibility into Java/.NET code with AppDynamics Lite! It's a free troubleshooting tool designed for production. Get down to code-level detail for bottlenecks, with <2% overhead. Download for free and get started troubleshooting in minutes. http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clkt r k _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!-------------------------------------------------------------------------- ---- Get 100% visibility into Java/.NET code with AppDynamics Lite! It's a free troubleshooting tool designed for production. Get down to code-level detail for bottlenecks, with <2% overhead. Download for free and get started troubleshooting in minutes. http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktr k _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------ Get 100% visibility into Java/.NET code with AppDynamics Lite! It's a free troubleshooting tool designed for production. Get down to code-level detail for bottlenecks, with <2% overhead. Download for free and get started troubleshooting in minutes. http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- ERROR: Can't set DAQ BPF filter to 'dna0:dna1' (pfring_daq_set_filter: BPF state machine compilation failed!)! Avery Rozar (Aug 13)
- Re: ERROR: Can't set DAQ BPF filter to 'dna0:dna1' (pfring_daq_set_filter: BPF state machine compilation failed!)! Russ Combs (Aug 13)
- Re: ERROR: Can't set DAQ BPF filter to 'dna0:dna1' (pfring_daq_set_filter: BPF state machine compilation failed!)! waldo kitty (Aug 13)
- <Possible follow-ups>
- Re: ERROR: Can't set DAQ BPF filter to 'dna0:dna1' (pfring_daq_set_filter: BPF state machine compilation failed!)! Y M (Aug 14)
- Re: ERROR: Can't set DAQ BPF filter to 'dna0:dna1' (pfring_daq_set_filter: BPF state machine compilation failed!)! Avery Rozar (Aug 14)