snort-users May 2011 archive
Main Archive Page > Month Archives  > snort-users archives
snort-users: [Snort-users] Snort in IPS mode

[Snort-users] Snort in IPS mode

From: turki <turki_00_at_nospam>
Date: Mon May 16 2011 - 00:09:51 GMT

I am new to snort, so i need help here.

I am trying to run snort in inline mode with the following command:
snort -Q --daq afpacket -i eth0 -c snort.conf

but snort initialization keeps failing with error message:

afpacket DAQ configured to inline.
ERROR: Can't initialize DAQ afpacket (-1) - afpacket_daq_initialize: Invalid interface specification: 'eth0'!
Fatal Error, Quitting..

I've managed to compile and run Snort as IDS without any problems:
snort -i eth0 -c snort.conf

- Do i have to do any modification in the snort.conf file?
- Is there any beginners tutorial for installing/running Snort in IPS mode?

running environment:
Ubuntu 11.04

Thank you

Achieve unprecedented app performance and reliability
What every C/C++ and Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools
to help boost performance applications - inlcuding clusters.

Snort-users mailing list
Go to this URL to change user options or unsubscribe:
Snort-users list archive: