[Snort-users] Snort wireless
steffen at ...11809...
Sun Jul 4 01:14:15 EDT 2004
> I compiled snort-2.1.1 with the wireless patch and it works fine. But now
> when i want to start snort with the -w option i receive a lot of errors!
> The first and most bad is the following:
> ERROR: /etc/rules/wifi.rules(9) => Bad protocol: wifi
> But the patch was applied!!!
Seems like it was not.
Have you used configure --enable-wireless ?
Start Snort and look for a message like this:
--== Initializing Snort ==--
Initializing Output Plugins!
Decoding IEEE 802.11 with PRISM headers on interface eth2
You have to start snort on an interface wich is either one with PRISM or
with 802.11b headers.
Steffen Pfendtner <steffen at ...11809...>
GPG Key fingerprint = DF91 11BB 498F 573B 8002 6E0B 3AE3 FF88 EADD B3BC
More information about the Snort-users