[Snort-users] Snort in daemon mode

Mark Kunzmann m25 at ...1171...
Fri Apr 13 08:30:34 EDT 2001

> > I get this error:
> >
> > Starting snort: Kernel filter, protocol ALL, raw packet socket [FAILED]
> >
> > Anymore ideas? Thanks for your help.
> Looks like it can't open a packet socket... Is libpcap properly
> installed with the libraries in you ld.so.conf path?

I have libpcap 0.4-19 installed on a RH 6.2 system. The paths as specified
in ld.so.conf are:


On RH6.2 the following files are installed from the rpm for libpcap:


This machine does IP masquerading also. eth1 (a RealTek RTL8139) points to
the internet, eth0 (a 3Com 3c509) to the internal LAN. I have no problems
with the masq setup.
Thanks again,

More information about the Snort-users mailing list