[Snort-users] FATAL ERROR: Cannot decode data link type 113

waldo kitty wkitty42 at ...14940...
Tue Nov 19 15:23:43 EST 2013


On 11/19/2013 2:30 PM, James Lay wrote:
>
> On Nov 19, 2013, at 12:20 PM, waldo kitty <wkitty42 at ...14940...> wrote:
>
>>
>> am seeing this on one sniffer and can't find my notes on the fix... as i recall,
>> it is something in the config file that is either commented out or needs to
>> be... the connection is PPPoE and the connection is up when starting snort...
>>
>> i believe the snort version is 2.9.5.5 but the system is remote and i cannot
>> access it directly…
>>
>
>
> Add:
>
> --enable-non-ether-decoders
>
> to your configline.

ahh! yes, that's it... thanks! :)


-- 
NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.




More information about the Snort-users mailing list