[Snort-users] Snort on Linux Help
davelist at ...4123...
Mon Nov 26 07:41:02 EST 2001
I'm running Redhat which was preinstalled on a new Dell server. libpcap
was installed, but when it didn't work I removed it and installed various
versions myself. None of them work. Do some net cards not support
promiscuous mode even when the syslog reports them going into promiscuous mode?
At 02:22 PM 11/21/2001 -0800, you wrote:
>OK, what flavor of Linux distribution are you running? Have you built
>your own kernel or are you using the \'stock\' one? RedHat, Mandrake and
>Slackware all seem to properly support libpcap right out of the box...
>In any case - until either tcpdump or ethereal work (both use libpcap)
>you won\'t get anywhere with snort...
More information about the Snort-users