[Snort-users] running snort on Ubuntu

Jari Fredriksson jarif at ...2940...
Thu Feb 23 01:58:35 EST 2012


23.2.2012 8:32, Jagan Mohan Reddy D kirjoitti:
> $ sudo /usr/local/snort/bin/snort -de -i eth0 --daq-dir
> /usr/local/lib/daq -l /var/log/snort/ -c /usr/local/snort/etc/snort.conf
> 
> 
> While using the above command i'm getting the following errors......
> 
> [ Number of patterns truncated to 20 bytes: 1041 ]
> ERROR: pcap DAQ does not support inline.
> Fatal Error, Quitting..
> 
> What's wrong in that command .....?
> 
> Here i'm attaching my snort.conf  
> 

 config daq_mode: inline

Remove/comment out that, or change to "passive". DAQ does not support
inline, just like the error says.



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120223/63d5771f/attachment.sig>


More information about the Snort-users mailing list