[Snort-users] Some help with barnyard needed

Erek Adams erek at ...950...
Wed May 21 08:23:11 EDT 2003


On Wed, 21 May 2003, Nicholas Delo wrote:

[...snip...]

> ERROR => No input plugin found for magic: a1b2c3d4

[...snip...]

I'd guess it's one of two things:

	*  Wrong filetype.   You're using a pcap instead of unified.
	*  Endian-ness change.  You stored the packets on a little-endian
box and are processing them on a big-endian box--Or vice versa.

If it's the second, just store and process on the same type of box.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson




More information about the Snort-users mailing list