[Snort-users] cronyx sigma-22, linux and snort-1.8.7
cmg at ...1935...
Mon Jul 22 07:43:05 EDT 2002
Andrew Noga <andrew at ...6398...> writes:
> Initializing Network Interface cx0
This needs to be a FAQ. Or it may already be one
> does anyone has the same problems as me?
If snort can't decode the link type you are on, we need packet
captures of that link.
Run tcpdump -s 25000 -w cisco-hdlc.cap ( or whatever your MTU is )
gzip it up, mail it to me or tell me where to wget it from if you have
in excess of 250K of gziped data.
Chris Green <cmg at ...1935...>
"I'm beginning to think that my router may be confused."
More information about the Snort-users