[Snort-users] ERROR: OpenPcap() FSM compilation failed:
Joe McAlerney
joey at ...155...
Thu Mar 22 20:21:23 EST 2001
I believe it's interpreting snort.conf as a bpf filter. You need to
place the -c option after the -v, or snort.conf between the two.
-Joe M.
--
| Joe McAlerney joey at ...155... |
| Silicon Defense - Technical Support for Snort |
| http://www.silicondefense.com/ |
+-- --+
Aaron McKinnon wrote:
>
> Just downloaded the latest version of snort.conf and all the rules. I
> untarred them into /etc/snort/rules_conf, changed the new snort.conf file to
> match my system, and tried to fire snort up and I'm getting a strange error:
>
> [root at ...1377... rules_conf]# /usr/sbin/snort -c -v snort.conf
>
> --== Initializing Snort ==--
>
> Initializing Network Interface eth0
> ERROR: OpenPcap() FSM compilation failed:
> parse error
> PCAP command: snort.conf
More information about the Snort-users
mailing list