Snort Forums Archive

Archive Home » Snort Newbies » Starting Snort Errors

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Starting Snort Errors

Posted by coolboarderguy on March 10, 2005 21:32:03

Hi All,

am a Linux user, Fedora3. Rather new to it, and snort as well. I have instaled snort and have apache/mysql running. Am following the tutorial for FC2 from Patrick S. Harper. I just tried starting snort and getb the following,

[root@localhost snort]# snort -i 192.168.0.12 -dev ./var/logs/snortlogs/snort
Running in packet dump mode

Initializing Network Interface 192.168.0.12
ERROR: OpenPcap() device 192.168.0.12 open:
ioctl: No such device
Fatal Error, Quitting..

I'm running 2 nics, one for external and one for internal. I want snort to watch the internal, 192.168.0.12 on eth0. I feel perhaps I haven't installed something snort is dependant on, yes,..? I tried a few times, with some differences in the command,

[root@localhost ~]# snort -i eth0 -dev ./var/logs/snortlogs/snort
Running in packet dump mode

Initializing Network Interface eth0
ERROR: OpenPcap() FSM compilation failed:
illegal char '.'
PCAP command: ./var/logs/snortlogs/snort
Fatal Error, Quitting..
[root@localhost ~]# snort -i eth0 -dev /var/logs/snortlogs/snort
Running in packet dump mode

Initializing Network Interface eth0
ERROR: OpenPcap() FSM compilation failed:
syntax error
PCAP command: /var/logs/snortlogs/snort
Fatal Error, Quitting..

Little lost. Can someone direct to where I should be.? Cheers.

coolboarderguy...

Posted by geekgerl on March 11, 2005 06:40:10

I think I found a link that will help you:

http://sourceforge.net/mailarchive/forum.php?thread_id=1764797&forum_id=3972

Hope this helps!

-Laura