[Snort-users] buglet in daq afpacket

Jason Haar Jason.Haar at ...294...
Thu Apr 14 17:37:21 EDT 2011


Hi there

If you call snort-2.9.0.5 with the "-T" option to test the config, you
get an error with afpacket that you don't get when you don't have any
daq detail in the config.

Namely, "snort -T -c file.conf" works fine when daq isn't mentioned, but
errors with:

ERROR: Can't initialize DAQ afpacket (-1) - afpacket_daq_initialize:
Invalid interface specification: ''!

...when you call it with "config daq: afpacket"

It can be fixed by calling "-T" with an interface (eg "-i eth0"), but
that isn't needed when daq isn't mentioned...

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1





More information about the Snort-users mailing list