[Snort-users] Error

Al Lewis (allewi) allewi at ...589...
Tue Jun 28 11:14:19 EDT 2016


Do you have active responses setup in your conf file? Are you setting snort into inline mode?

Please see the active.readme file within the snort download or online here: https://www.snort.org/faq/readme-active

<https://www.snort.org/faq/readme-active>
For best results snort should be run inline for active responses.


Thanks.

Albert Lewis
QA SNORT/Sourcefire
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi at ...589...<mailto:allewi at ...589...>


From: Ikenna Chiadikaobi <reniykec at ...131...<mailto:reniykec at ...131...>>
Reply-To: Ikenna Chiadikaobi <reniykec at ...131...<mailto:reniykec at ...131...>>
Date: Tuesday, June 28, 2016 at 11:03 AM
To: allewi <allewi at ...589...<mailto:allewi at ...589...>>
Subject: Re: [Snort-users] Error

hi, am running this (  sudo snort -r inside.tcpdump -c snort.conf )





On Tuesday, June 28, 2016 10:57 PM, Al Lewis (allewi) <allewi at ...589...<mailto:allewi at ...589...>> wrote:


Hello,

What command are you using to start snort?


Albert Lewis
QA SNORT/Sourcefire
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi at ...589...<mailto:allewi at ...589...>


From: Ikenna Chiadikaobi <reniykec at ...131...<mailto:reniykec at ...131...>>
Reply-To: Ikenna Chiadikaobi <reniykec at ...131...<mailto:reniykec at ...131...>>
Date: Tuesday, June 28, 2016 at 10:12 AM
To: 'snort-users' <snort-users at lists.sourceforge.net<mailto:snort-users at lists.sourceforge.net>>
Subject: [Snort-users] Error

hi, please i get this error.

WARNING: active responses disabled since DAQ can't inject packets.




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20160628/49f392d8/attachment.html>


More information about the Snort-users mailing list