[Snort-users] Problem with Upgrading to 1.9

linus at ...827... linus at ...827...
Mon Oct 7 14:50:05 EDT 2002


Hi,
I have just upgraded to Snort 1.9 from Snort 1.87 using the RPM
binaries. I edited the snort.conf and used the HOME_NET variable as I
did in the previous version.
 
var HOME_NET [$ppp0_ADDRESS,192.168.0.0/24]
(I am connecting using an ADSL connection, which is connected to eth2
and this worked with snort 1.8.7)
 
However when I start snort, I get the following log messages:
 
Oct  8 06:06:27 kylie snort: Initializing Output Plugins!
Oct  8 06:06:27 kylie kernel: eth0: Setting promiscuous mode.
Oct  8 06:06:27 kylie kernel: device eth0 entered promiscuous mode
Oct  8 06:06:27 kylie snort: ERROR: OpenPcap() FSM compilation failed:
^Iparse error
Oct  8 06:06:27 kylie snort: FATAL ERROR: PCAP command: ppp0
Oct  8 06:06:27 kylie kernel: device eth0 left promiscuous mode
Oct  8 06:06:27 kylie snortd: snort startup failed
 
Can anyone tell me if I have missed anything. Or is this something that
changed in the new version.
 
Other info:
Redhat 7.3
Libpcap 0.6.2
 
Linus Hindmarsh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20021007/2dcb2179/attachment.html>


More information about the Snort-users mailing list