[Snort-users] flexresp and libnet

Hauser Marcel marcel_hauser at ...1171...
Fri Jan 3 18:06:02 EST 2003


Hi all

I'am currently playing arround with flexresp.. when i start snort as 
user and group nobody, i get the following error message (flexresp is 
"enabled" in one rule"):

FATAL ERROR: ERROR: cannot open raw socket for libnet, exiting...

if i run snort as root... everything's fine!

Is that normal ? do i HAVE to run snort as root in order to get flexresp 
working ?

Thanks

Marcel






More information about the Snort-users mailing list