[Snort-users] pppoe

Виктор Захаров zakharru at ...11827...
Tue Dec 13 13:09:48 EST 2011


Good evening
I use 2.9.1 version on gentoo, and try to use ppp0 interface -  /etc/conf.d
/snort -

SNORT_IFACE="ppp0"
SNORT_CONF="/etc/snort/snort.conf"
SNORT_OPTS="-D -u snort -i $SNORT_IFACE -c $SNORT_CONF

snort started but writes this message
Decoding Ethernet
Dec 13 21:09:37 snort[24843]: FATAL ERROR: Can't start DAQ (-1) -
start_instance: invalid interface type for device ppp0: 512 != 1!

if i use eth0, eth1 interface- snort started normal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20111213/83953b79/attachment.html>


More information about the Snort-users mailing list