Snort mailing list archives

Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode


From: Jutichai Thongkrachai <thsecmaniac () gmail com>
Date: Sun, 17 Aug 2014 14:10:49 +0700

Hello

I would like to turn on Sniffer mode of Snort 2.9.6 on Centos 7 but I got
the error below:

------------------------------------------------
./snort -v
Running in packet dump mode

        --== Initializing Snort ==--
Initializing Output Plugins!
pcap DAQ configured to passive.
Acquiring network traffic from "nflog".
ERROR: Cannot decode data link type 239
Fatal Error, Quitting..
-------------------------------------------------

Please help.
------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: