[Snort-users] Snort on Linux Help

David Wilkeson davelist at ...4123...
Mon Nov 26 07:41:02 EST 2001


I'm running Redhat which was preinstalled on a new Dell server.  libpcap 
was installed, but when it didn't work I removed it and installed various 
versions myself.  None of them work.  Do some net cards not support 
promiscuous mode even when the syslog reports them going into promiscuous mode?

At 02:22 PM 11/21/2001 -0800, you wrote:
>OK, what flavor of Linux distribution are you running? Have you built
>your own kernel or are you using the \'stock\' one? RedHat, Mandrake and
>Slackware all seem to properly support libpcap right out of the box...
>
>In any case - until either tcpdump or ethereal work (both use libpcap)
>you won\'t get anywhere with snort...






More information about the Snort-users mailing list