[Snort-users] Snort on PPP
berjo at ...827...
Sat Mar 3 22:30:53 EST 2001
-----BEGIN PGP SIGNED MESSAGE-----
I am using Snort 1.7, but when I start it manually (to make sure that
it's working) with the following command line:
snort -Afull -c /etc/snort/snort.conf -i ppp0
I get the following message:
--== Initializing Snort ==--
Initializing Network Interface ppp0
snort cannot handle data link type 101
it then carries on about it packet stats before returning to the
If I start it as a daemon (using /etc/rc.d/init.d/snortd start) it
reports as starting OK, but immediately when I do a snortd status I
get this message:
snort dead but subsys locked
Any help would be appreciated.
- -----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Vitaly
Sent: Saturday, 3 March 2001 19:49
To: berjo at ...827...
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Snort on PPP
It's late, so I'll give you a simple answer: Yes. :)
It's easier with Snort 1.7, in terms of getting Snort to work with a
dynamically-assigned IP. In Snort 1.6.x and below, a shell script was
needed, but not with Snort 1.7.
twistah at ...93...
twistah @ OPN & EfNet
"If you don't turn on to politics, politics will turn on you."
- Ralph Nader
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
-----END PGP SIGNATURE-----
More information about the Snort-users