[Snort-users] cronyx sigma-22, linux and snort-1.8.7

Chris Green cmg at ...1935...
Mon Jul 22 07:43:05 EDT 2002


Andrew Noga <andrew at ...6398...> writes:

> Initializing Network Interface cx0
>

This needs to be a FAQ. Or it may already be one

> does anyone has the same problems as me?

If snort can't decode the link type you are on, we need packet
captures of that link.

Run tcpdump -s 25000 -w cisco-hdlc.cap ( or whatever your MTU is )

gzip it up, mail it to me or tell me where to wget it from if you have
in excess of 250K of gziped data.

Thanks,
Chris
-- 
Chris Green <cmg at ...1935...>
"I'm beginning to think that my router may be confused."




More information about the Snort-users mailing list