[Snort-users] second layer header error

Fyodor fygrave at ...121...
Mon Oct 30 14:20:32 EST 2000


On Mon, Oct 30, 2000 at 01:57:18PM -0500, Andrew Hall wrote:
> Thanks. I have removed the -e, but I still receive the below error.  Can
> someone tell me if there is a way to disable snort looking at netmask or am
> I interperting this error incorrectly.
> 
> 
> 	/test/lib/backdoor.sigbased.rules (6) =>  No netmask specified for IP
> address
> 
> If I do an ifconfig on ppp0 I see no netmask defined for that interface.  Is
> it possible to run snort on a ppp interface created by pppoe?
> 

well, the second error has nothing to do with your interface. it's error in the file itself. Edit line 6 there
and specify netmask, should fix the problem :)




More information about the Snort-users mailing list