Snort Forums Archive

Archive Home » BSD » OS-X no suitable device found error

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

OS-X no suitable device found error

Posted by Shongololo on July 06, 2007 08:18:02

I installed snort on my macbookpro (os-x 10.4.10) using sudo port install snort
On going through the snort tutorial I get the following error on the very first example that
indicates that no suitable device has been found - what is it looking for? libpcap?an output
device? the NIC? Any help much appreciated.

my-computer:~ me$ snort -v
Running in packet dump mode

--== Initializing Snort ==--
Initializing Output Plugins!
Verifying Preprocessor Configurations!
ERROR: Failed to lookup for interface: no suitable device found. Please specify one with -i
switch
Fatal Error, Quitting..
my-computer:~ me$

my-computer:~ me$ snort -V

,,_ -*> Snort! <*-
o" )~ Version 2.6.1.4 (Build 54)
'''' By Martin Roesch & The Snort Team: http://www.snort.org/team.html
(C) Copyright 1998-2007 Sourcefire Inc., et al.

Posted by superseidl on July 24, 2007 12:59:22

Try -i en0 (or whatever device you want to capture on)
Also you most likely have to do it either as sudo, or use the chmodbpf startup item for libpcap (see: http://www.ethereal.com/lists/ethereal-users/200608/msg00021.html )