| Main Archive Page > Month Archives > snort-users archives |
[Snort-users] Snort in IPS mode
From: turki <turki_00_at_nospam>Date: Mon May 16 2011 - 00:09:51 GMT
To: snort-users@lists.sourceforge.net
Hi,
I am new to snort, so i need help here.
I am trying to run snort in inline mode with the following command:
snort -Q --daq afpacket -i eth0 -c snort.conf
but snort initialization keeps failing with error message:
afpacket DAQ configured to inline.
ERROR: Can't initialize DAQ afpacket (-1) - afpacket_daq_initialize: Invalid interface specification: 'eth0'!
Fatal Error, Quitting..
I've managed to compile and run Snort as IDS without any problems:
snort -i eth0 -c snort.conf
- Do i have to do any modification in the snort.conf file?
- Is there any beginners tutorial for installing/running Snort in IPS mode?
running environment:
Ubuntu 11.04
Snort 2.9.0.5
Thank you
------------------------------------------------------------------------------
Achieve unprecedented app performance and reliability
What every C/C++ and Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools
to help boost performance applications - inlcuding clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users