[Snort-users] Got the "ERROR: Cannot decode data link type 239" message when turn on sniffer mode

Jutichai Thongkrachai thsecmaniac at ...11827...
Sun Aug 17 03:10:49 EDT 2014


I would like to turn on Sniffer mode of Snort 2.9.6 on Centos 7 but I got
the error below:

./snort -v
Running in packet dump mode

        --== Initializing Snort ==--
Initializing Output Plugins!
pcap DAQ configured to passive.
Acquiring network traffic from "nflog".
ERROR: Cannot decode data link type 239
Fatal Error, Quitting..

Please help.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140817/616a0591/attachment.html>

More information about the Snort-users mailing list