Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Linux » Error SNORT cannot handle data link type 138

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Error SNORT cannot handle data link type 138


Posted by celeste on October 09, 2006 19:12:42

I am following the instrutions "snort HOW To for OS X" I got off homepage.mac.com. I am running a G5 with OS 10.4. when I start Snort (sudo snort -c /opt/local/etc/snort/snort.conf) I get an error SNORT cannot handle data link type 138 and no packet are received and snort exits.

Can someone help me with this problem?

Celeste

Posted by roesch on October 10, 2006 10:29:37

What kind of network are you running on? Type 138 is IP over firewire, is that what you're
running off of? Which sensing interface are you trying to use?

Posted by celeste on October 10, 2006 11:17:32

This is my home computer and it is using wireless (air port) to get it to the internet. I am all most sure we are not on Appletalk.