[Snort-users] FATAL ERROR: Cannot decode data link type 113

James Lay jlay at ...13475...
Tue Nov 19 14:30:01 EST 2013


On Nov 19, 2013, at 12:20 PM, waldo kitty <wkitty42 at ...14940...> wrote:

> 
> am seeing this on one sniffer and can't find my notes on the fix... as i recall, 
> it is something in the config file that is either commented out or needs to 
> be... the connection is PPPoE and the connection is up when starting snort...
> 
> i believe the snort version is 2.9.5.5 but the system is remote and i cannot 
> access it directly…
> 


Add:

--enable-non-ether-decoders

to your configline.

James
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 496 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20131119/dc43a2a5/attachment.sig>


More information about the Snort-users mailing list