[Snort-users] snort wireless card "ERROR: Can't start DAQ (-1) - ê!î???!"

acv acv at ...14447...
Tue Nov 15 18:02:38 EST 2011


Hi,

Sounds like your wireless device does not support promiscuous mode. Try using
WinDump on the interface, if it fails to, you'll know that it's the hardware
(and/or drivers) and not snort.

Alex

On Tue, Nov 15, 2011 at 10:03:34PM +0000, codeforfun wrote:
> Date: Tue, 15 Nov 2011 22:03:34 +0000
> From: codeforfun <codeforfun at ...10619...>
> To: snort-users at lists.sourceforge.net
> Subject: [Snort-users] snort wireless card "ERROR: Can't start DAQ (-1) - ê!î???!"
> 
> I have installed snort and have it running fine with my wired interface.
> 
> But when i try to run snort with my wireless card i get this error 
> "ERROR: Can't start DAQ (-1) - ê!î???!"
> 
> Could someone please help point me in the right direction?
> 
> 
> 
> Full Error Message:
> 
> Initializing Output Plugins!
> pcap DAQ configured to passive.
> Acquiring network traffic from 
> "\Device\NPF_{########-####-####-############}".
> ERROR: Can't start DAQ (-1) - ê!î???!
> Fatal Error, Quitting..
> 
> 
> 
> Version information:
> 
> Snort Version 2.9.1.2-ODBC-MySQL-WIN32 IPv6 GRE (Build 84)
> Using PCRE version: 8.10 2010-06-25
> Using ZLIB version: 1.2.3
> WinPcap 4.1.2
> 
> 
> --
> codeforfun
> 
> ------------------------------------------------------------------------------
> RSA(R) Conference 2012
> Save $700 by Nov 18
> Register now
> http://p.sf.net/sfu/rsa-sfdev2dev1
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20111115/76e1f8a1/attachment.sig>


More information about the Snort-users mailing list