[Snort-users] flexresp and libnet
marcel_hauser at ...1171...
Fri Jan 3 18:06:02 EST 2003
I'am currently playing arround with flexresp.. when i start snort as
user and group nobody, i get the following error message (flexresp is
"enabled" in one rule"):
FATAL ERROR: ERROR: cannot open raw socket for libnet, exiting...
if i run snort as root... everything's fine!
Is that normal ? do i HAVE to run snort as root in order to get flexresp
More information about the Snort-users