snort-users May 2011 archive
Main Archive Page > Month Archives  > snort-users archives
snort-users: [Snort-users] Snort in IPS mode

[Snort-users] Snort in IPS mode

From: turki <turki_00_at_nospam>
Date: Mon May 16 2011 - 00:09:51 GMT
To: snort-users@lists.sourceforge.net

Hi,
I am new to snort, so i need help here.

I am trying to run snort in inline mode with the following command:
snort -Q --daq afpacket -i eth0 -c snort.conf

but snort initialization keeps failing with error message:

afpacket DAQ configured to inline.
ERROR: Can't initialize DAQ afpacket (-1) - afpacket_daq_initialize: Invalid interface specification: 'eth0'!
Fatal Error, Quitting..

I've managed to compile and run Snort as IDS without any problems:
snort -i eth0 -c snort.conf

- Do i have to do any modification in the snort.conf file?
- Is there any beginners tutorial for installing/running Snort in IPS mode?

running environment:
Ubuntu 11.04
Snort 2.9.0.5

Thank you

------------------------------------------------------------------------------
Achieve unprecedented app performance and reliability
What every C/C++ and Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools
to help boost performance applications - inlcuding clusters.
http://p.sf.net/sfu/intel-dev2devmay

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users