[Snort-users] Can't Start DAQ

Sean Liebhard sliebhard at ...17395...
Mon Dec 14 17:45:24 EST 2015


snort -d -A console -u snort -g snort -c /usr/local/etc/snort/snort.conf -i eth1:eth2 -Q

From: Al Lewis (allewi) [mailto:allewi at ...589...]
Sent: Monday, December 14, 2015 2:36 PM
To: Sean Liebhard; 'snort-users at lists.sourceforge.net'
Subject: RE: Can't Start DAQ

Hello,

What commands are you using to start snort?



Albert Lewis
QA Software Engineer
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi at ...589...<mailto:allewi at ...589...>

From: Sean Liebhard [mailto:sliebhard at ...17395...]
Sent: Monday, December 14, 2015 4:40 PM
To: 'snort-users at lists.sourceforge.net'
Subject: [Snort-users] Can't Start DAQ

Following the SNORT IPS on VMware ESX guide @ https://www.snort.org/documents/snort-ips-tutorial

Installation went fine aside from some version differences.  When starting SNORT in inline mode the following error is generated:

ERROR: Can't start DAQ (-1) - bind_instance_interface: getsockopt: No such file or directory!
Fatal Error, Quitting..

I can't find anything in the mailing list or documentation with this specific error.

Any insight?

--Sean Liebhard

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20151214/8d60193b/attachment.html>


More information about the Snort-users mailing list