[Snort-users] Snort 18.104.22.168 throws ERROR: Cannot decode data link type 113 while reading pcaps
wkitty42 at ...14940...
Wed May 20 08:00:49 EDT 2015
On 05/20/2015 07:40 AM, Pratik Narang wrote:
> Now, I tried to run it against .pcap files in a directory using the
> option --pcap-dir="/path/to/dumpfiles". Snort throws up an error:
> ERROR: Cannot decode data link type 113
> I read somewhere that "--enable-non-ether-decoders" can be used to
> resolve this. But I guess this option is not available for the present
> version of Snort.
that's a compile time option... you have to use it when you run configure or
make to create your snort binary...
NOTE: No off-list assistance is given without prior approval.
Please *keep mailing list traffic on the list* unless
private contact is specifically requested and granted.
More information about the Snort-users