[Snort-users] ERROR: OpenPcap() FSM compilation failed:

[Joe McAlerney]

I believe it's interpreting snort.conf as a bpf filter.  You need to
place the -c option after the -v, or snort.conf between the two.

-Joe M.

-- 
|   Joe McAlerney     joey at ...155...   |
| Silicon Defense - Technical Support for Snort |
|       http://www.silicondefense.com/          |
+--                                           --+

Aaron McKinnon wrote:
> 
> Just downloaded the latest version of snort.conf and all the rules. I
> untarred them into /etc/snort/rules_conf, changed the new snort.conf file to
> match my system, and tried to fire snort up and I'm getting a strange error:
> 
> [root at ...1377... rules_conf]# /usr/sbin/snort -c -v snort.conf
> 
>         --== Initializing Snort ==--
> 
> Initializing Network Interface eth0
> ERROR: OpenPcap() FSM compilation failed:
>         parse error
> PCAP command: snort.conf