Snort mailing list archives
Error trying to read in tcpdump file
From: "Jason Lewis" <jlewis () jasonlewis net>
Date: Mon, 11 Jun 2001 21:53:58 -0400
--== Initializing Snort ==--
TCPDUMP file reading mode.
Reading network traffic from "/home/jlewis/snort-0611 () 0231 log" file.
snaplen = 1514
ERROR: OpenPcap() FSM compilation failed:
unknown data link type 0x71
PCAP command: (null)
Fatal Error, Quitting..
Here is the command I am using.
/usr/local/bin/snort -u snort -g snort -c /etc/snort/snort.conf -r
/home/jlewis/snort-0611 () 0231 log
What am I missing? I am ftping this from a remote sensor to my db server
and trying to replay the file to populate the db.
Jason Lewis
http://www.packetnexus.com
It's not secure "Because they told me it was secure". The people at the
other end of the link know less about security than you do. And that's
scary.
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Guardian Neal Timm (Jun 11)
- <Possible follow-ups>
- Guardian Neal Timm (Jun 11)
- Error trying to read in tcpdump file Jason Lewis (Jun 11)
- RE: Error trying to read in tcpdump file Jason Lewis (Jun 11)
- Re: Error trying to read in tcpdump file Martin Roesch (Jun 11)
- RE: Error trying to read in tcpdump file Jason Lewis (Jun 12)
- Re: Error trying to read in tcpdump file Martin Roesch (Jun 12)
- RE: Error trying to read in tcpdump file Jason Lewis (Jun 12)
- Re: Error trying to read in tcpdump file Martin Roesch (Jun 12)
- Error trying to read in tcpdump file Jason Lewis (Jun 11)
